How do I backup an IPS config (ASA-SSM-10)

Hi,
How do I backup an IPS config (ASA-SSM-10)?
Thanks

There is a copy command in the IPS CLI that can be used to copy the current configuration to a backup configuration on the sensor itself.
Or to copy the current configuration to an FTP or SCP server.
The copy command can then be used to copy a configuration from backup or from an FTP or SCP server back to the running configuration of the sensor.
http://www.cisco.com/en/US/docs/security/ips/6.2/command/reference/crCmds.html#wp458440

Similar Messages

Upgrading IPS strings, ASA SSM-10 module

I am having a challenging time upgrading the ASA SSM-10 IPS module. I down loaded the IPS-sig-s327-req-e1.pkg to Win XP ftp server (my workstation). The instructions in following does not work: http://download-sj.cisco.com/cisco/ciscosecure/ips/6.x/sigup/IPS-sig-S327.readme.txt
"error: execUpgradeSoftware : Connect failed". Any suggestion would be appreciated.

I can connect the LAN switch directly to the inside interface of the ASA5510 firewall. Hosts can get Internet connectivity while cabled to the switch. However, when the LAN switch is connected to the port on the IPS module, there is no Internet connectivity. Any suggestions would be appreciated. The following is the sh configuration and sh int output.
sh con_[Jfiguration
Version 5.1(6)
! Current configuration last modified Sat Apr 05 12:28:11 2008
service interface
exit
service analysis-engine
virtual-sensor vs0
physical-interface GigabitEthernet0/1
exit
exit
service authentication
exit
service event-action-rules rules0
exit
service host
network-settings
host-ip 192.168.1.36/24,192.168.1.10
host-name ips
telnet-option enabled
--MORE--
access-list 0.0.0.0/0
exit
time-zone-settings
offset 0
standard-time-zone-name UTC
exit
exit
service logger
exit
service network-access
exit
service notification
exit
service signature-definition sig0
exit
service ssh-known-hosts
exit
service trusted-certificates
--MORE--
exit
service web-server
exit
ips# sh inter_[Jfaces _[2C
Interface Statistics
Total Packets Received = 6806
Total Bytes Received = 2001784
Missed Packet Percentage = 0
Current Bypass Mode = Auto_off
MAC statistics from interface GigabitEthernet0/1
Interface function = Sensing interface
Description =
Media Type = backplane
Missed Packet Percentage = 0
Inline Mode = Unpaired
Pair Status = N/A
Link Status = Up
Link Speed = Auto_1000
Link Duplex = Auto_Full
Total Packets Received = 6807
Total Bytes Received = 2001866
Total Multicast Packets Received = 0
Total Broadcast Packets Received = 0
Total Jumbo Packets Received = 0
Total Undersize Packets Received = 0
Total Receive Errors = 0
Total Receive FIFO Overruns = 0
Total Packets Transmitted = 6807
--MORE--
Total Bytes Transmitted = 2017118
Total Multicast Packets Transmitted = 0
Total Broadcast Packets Transmitted = 0
Total Jumbo Packets Transmitted = 0
Total Undersize Packets Transmitted = 0
Total Transmit Errors = 0
Total Transmit FIFO Overruns = 0
MAC statistics from interface GigabitEthernet0/0
Interface function = Command-control interface
Description =
Media Type = TX
Link Status = Down
Link Speed = N/A
Link Duplex = N/A
Total Packets Received = 126
Total Bytes Received = 14255
Total Multicast Packets Received = 0
Total Receive Errors = 0
Total Receive FIFO Overruns = 0
Total Packets Transmitted = 1
Total Bytes Transmitted = 64
Total Transmit Errors = 0
Total Transmit FIFO Overruns = 0

How do you re-import IPS config in CSM 3.1?

We have changed the configuration through the IDM on the local sensor. Now we have to re-import so CSM is synched up. The interface has changed substantially. Has anyone done this yet?

re-importation is now done by right clicking on the IPS and selecting Discover Policies From Device.

Proper ASA-SSM-20 IPS and MARS Intergration

I?m trying to understand how to best manage my MARS and ASA-SSM-20 IPS implementation. I?ve been running this solution for about 2 months and have been experimenting with how to manage alert s from the blades to MARS.
The MARS documentation says to configure 2 Event Action Override -Verbose Alerts and Log Pair Packets. However there seems to be a major drawback:
1. The IPS generates alert for signatures that by default have no alert action configured. At first glance this seems ok, but over time I found that many false positives are generated for signatures that would otherwise remain quite.
My question is, how should this be managed? I want verbose alerts and logged pair packets for signatures that produce alerts by default, but if I manually configure this, is there a performance consideration?

You might be hitting the bug CSCuc34812.
Please contact Cisco TAC to have the issue analyzed.
Regards,
Sawan Gupta

IDS/IPS config Backup through IDM

Hi,
Can we take config backup through IDM, as I regularly upgrade OS & signautures and need to take backup of our config. But in IDM I could not find any option. AS I solely want to use IDM for all purposes.
Currenlty I need to do ssh,take backup and then upgrade thru IDM.

Thanks for your reply! I should then request Cisco developers to give such usefule facility as then we can solely use IDM for all purposes. Its painful to log thru ssh take backup and then upgrade using IDM. or use only ss to do everything then what for IDM is?
Reg.
YT

ASA SSM IPS module upgrade won't work

Hello all,
I'm trying to upgrade the IPS sig's on an ASA5520 with a SSM IPS module. I'm trying to upgrade the system to 5.1.1 to further upgrade the device with no luck.
I followed these steps provided by Cisco.com:
1. Log in to the ASA.
2. Enter enable mode:
asa# enable
3. Configure the recovery settings for ASA-SSM:
asa (enable)# hw-module module 1 recover configure
NOTE: If you make an error in the recovery configuration, use the
hw-module module 1 recover stop command to stop the system reimaging
and then you can correct the configuration.
4. Specify the TFTP URL for the system image:
Image URL [tftp://0.0.0.0/]:
Example:
Image URL [tftp://0.0.0.0/]: tftp://10.20.30.40/IPS-SSM-K9-sys-1.1-a-5.1-1.img
5. Specify the command and control interface of ASA-SSM:
Port IP Address [0.0.0.0]:
Example:
Port IP Address [0.0.0.0]: 11.21.31.41
6. Leave the VLAN ID at 0.
VLAN ID [0]:
7. Specify the default gateway of the ASA-SSM:
Gateway IP Address [0.0.0.0]:
Example:
Gateway IP Address [0.0.0.0]: 11.22.33.44
8. Execute the recovery:
asa# hw-module module 1 recover boot
9. Periodically check the recovery until it is complete.
NOTE: The status reads "Recovery" during recovery and reads "Up" when
reimaging is complete.
AFter #8 it just goes back to the enable prompt. A 'sh module' lists the device as 'recover' and hangs FOREVER.... I tested the TFTP server which the new image resides on, and the TFTP is working fine. I don't see any attempts or downloads from the TFTP server for over an hour.
I opened a Ciscop TAC on this and not receiving alot of help...
Please help!!!:)
Thanks
Chris Serafin
[email protected]

The recovery using this method can takes upwards of 30 minutes, and in some cases even longer.
How long have you left the SSM in the "recovery" state?
There may be something wrong in the config you entered. when that happens the SSM can go into a continuous reboot cycle trying to do the recovery.
Execute "debug module-boot" on the console of the ASA.
The debug output will show you the ROMMON output of the SSM itself. (The SSM has it's own ROMMON. The recovery boot command sends the settings made during the recover configure command to the SSM's ROMMON).
If the ROMMON is experiencing a problem in trying to download the tftp image you should now see that ROMMON error message.
Some typical problems I have seen:
1) Wrong IP given for the sensor.
2) Wrong IP given for the gateway (the gateway must exist on the same network as the sensor) this problem usually happens when using a non-standard netmasked network.
3) Not having the sensor's command and control port plugged into the right network. The external port of the SSM itself is where the IP is being applied. You need to ensure that the extenral port of the SSM is plugged into the right network for that IP.
4) The tftp server is not reachable from the network where the sensor's command and control port is attached. Some users think that if the ASA itself can reach the tftp server that the SSM will also be able to. This is not always the case. It is best to use a tftp server on the same network as the IP provided to the SSM. Or to test the tftp server from another machine on the same network as the SSM.
5) The file name is wrong. Check the captialization especially.
6) The file is not in the default directory on the tftp server. If the file is in a subdirectory you will need to add that subdirectory to the URL:
tftp://10.20.30.40/subdirectoryname/filename
7) The tftp is timing out.
There are 2 things that can cause this:
a) The tftp server is remote, and it takes too long to download the file. The ROMMON does have limits on the number of retries and per packet timeouts (but they are not user configurable). Try using a tftp server local to the SSM.
b) The switch that the SSM connects to has spanning-tree running and spanning-tree does not complete before the SSM ROMMON times out for the tftp attempt. The tftp attempt happens immediately upon ROMMON startup and link up. But with a switch the switch port may be in a "Listen" or "Learn" state for 40 seconds before the box can actually talk on the network. In some cases the tftp download attempts started as soon as link up, and may timeout even before the spanning-tree completes. To work around this configure "spanning-tree portfast" on the switchport. Spanning-tree will connect the port into the vlan immediately rather than 40 seconds later.
If it was a config problem when configuring the recovery settings, then there is a "recover stop" command on the ASA.
It will stop the reboot cycle from happening.
Let the module come up with the old image.
Then correct your "recover configure" settings, and try the "recover boot" again.
Another alternative:
Stop the recovery "recover stop"
Let it boot into the old image.
If it was a 5.0 version, then you can actually upgrade to 5.1 using the sensor's own CLI "upgrade" command. It is actually the preferred method.
The "recover" from the ASA will wipe the box clean and load a fresh image.
The "upgrade" from the sensor will convert your 5.0 config into a 5.1 config while installing 5.1.
5.1 upgrade file:
IPS-K9-min-5.1-1g.pkg
http://www.cisco.com/cgi-bin/tablebuild.pl/ips5
It can be applied through the sensor's CLI upgrade command, or pushed directly through IDM, or applied by CSM.
The "recover" should be limited to disaster recovery. When you can't access the SSM at all, or the files on the SSM have been corrupted.
For normal upgrades you want to use "upgrade" files done through the sensor itelf (CLI, IDM, or CSM).

Cisco IPS ASA SSM-10

I am using an ASA SSM-10 IPS. Currently it keeps logging those event of alerts.
Where does the IPS keeps all those event logs? In the disk space?
Where can i see how much space i left?
Will it went down if the space is full?

This is from the post I linked earlier, and you don't have to worry the sensor will definitely not go 'down', the event-log data structure is circular and is over-written every time it is full.
"The eventStore size starting at version 5.0(1) is a fixed 30 Meg. Its a *circular* eventStore that is intended to wrap (new events overwriting oldest events). The usual sensor deployment includes some sort of remote event monitor application (like IEV,IME etc.) that pulls events from the sensor. The eventStore acts as a buffer to allow the remote monitoring app to keep up with busy sensors. If your eventStore wraps every few hours then the monitoring app should be able to keep up with all the events being generated. The concern would be if the eventStore continuously wrapped in less than 10 or 15 minutes. At that point you may be loosing events and would need to tune the sensor signature config to only alarm on meaningful events."
I'm assuming since the event-store is only 30 MB, its a 'part' of one of the following parititions:
application-data OR application-log
Most probably the first one.
Regards
Farrukh

How to do a factory reset ASA-SSM-10?

Hi.
I forgot the user for management a IPS SSM-10, when i follow the procedure to reset the password for cisco user, i can get into the module, i change the password and every thing is OK, but when i tried to configure y don´t have rights to do anything.
if i see the privileges for the user cisco this is the result
EDGE-IPS2# sh user
    CLI ID   User    Privilege
*   4143     cisco   viewer
Application Partition:
Cisco Intrusion Prevention System, Version 6.1(1)E2
Host:
    Realm Keys          key1.0
Signature Definition:
    Signature Update    S364.0                   2008-10-24
    Virus Update        V1.4                     2007-03-02
OS Version:             2.4.30-IDS-smp-bigphys
Platform:               ASA-SSM-10
Serial Number:          JAF1208BNPP
License expired:        20-Jun-2009 UTC
Sensor up-time is 1:09.
Using 657850368 out of 1032495104 bytes of available memory (63% usage)
system is using 17.7M out of 29.0M bytes of available disk space (61% usage)
application-data is using 41.5M out of 166.8M bytes of available disk space (26% usage)
boot is using 40.5M out of 68.6M bytes of available disk space (62% usage)
MainApp          M-2008_APR_24_19_16    (Release)   2008-04-24T19:49:05-0500   Running
AnalysisEngine   ME-2008_JUN_05_18_26   (Release)   2008-06-05T18:55:02-0500   Running
CLI              M-2008_APR_24_19_16    (Release)   2008-04-24T19:49:05-0500
Upgrade History:
* IPS-K9-6.1-1-E2           22:40:50 UTC Tue Feb 26 2013
IPS-sig-S364-req-E2.pkg   18:43:20 UTC Wed Nov 12 2008
Recovery Partition Version 1.1 - 6.1(1)E2
Host Certificate Valid from: 17-Nov-2008 to 18-Nov-2010
What can i do in this case?
IPS Info
Getting details from the Service Module, please wait...
ASA 5500 Series Security Services Module-10
Model:              ASA-SSM-10
Hardware version:   1.0
Serial Number:      JAF1208BNPP
Firmware version:   1.0(11)4
Software version:   6.1(1)E2
MAC Address Range: 001e.f710.5b6c to 001e.f710.5b6c
App. name:          IPS
App. Status:        Up
App. Status Desc:
App. version:       6.1(1)E2
Data plane Status: Up
Status:             Up
Mgmt IP addr:       X.X.X.X
Mgmt web ports:     443
Mgmt TLS enabled:

The process will normally use the following command:
hw-module module 1 password-reset
It will reload the ASA and when loggin back the "Cisco" username will have admin rights.
If this is not your case, a re-image of the unit will be the next step, keep in mind that this will remove all the custom config.

How to restore backup files to a new database?

Hello all,
Our database has stopped working because many config files and some control files were deleted or changed! You can see the full discussion here: ORA-01034 - Oracle not availabe
We are using Oracle 11g. We got some comprehensive backup files and some incremental ones before this failure.
Do these backup files contain config and control files too? or just contains data?
And how I can recover the database using them?
Thanks for your help

Thank you so much for your attention.
Yes exactly, I installed oracle on my laptop and copped its control files into the database and they didn't work
1- Many backup files of level 0 and level 1. They've been created using these rman commands:
echo database backup, level 1
echo %DATE%
echo %TIME%
set datetimef=%date:~-4%_%date:~4,2%_%date:~7,2%_%time:~0,2%_%time:~3,2%_%time:~6,2%
echo %datetimef%
rman target / @F:\backup1.txt LOG F:\database-backup\rman-logs\%datetimef%.txt
copy F:\database-backup\rman-logs\%datetimef%.txt F:\database-backup\rman-logs\current-log.txt
and
echo database backup, level 0
echo %DATE%
echo %TIME%
set datetimef=%date:~-4%_%date:~4,2%_%date:~7,2%_%time:~0,2%_%time:~3,2%_%time:~6,2%
echo %datetimef%
rman target / @F:\backup0.txt LOG F:\database-backup\rman-logs\%datetimef%.txt
copy F:\database-backup\rman-logs\%datetimef%.txt F:\database-backup\rman-logs\current-log.txt
What have you done before getting "Oracle not available" message?
One of group members tried to create a new database using Oracle Database Configuration Assistant and then she couldn't work with the new database (I guess she got some errors when she decided to connect to it using sqldeveloper) and then she deleted the new database using Oracle Database Configuration Assistant, and in the last part it asked her Do you want to delete everything related to the new database and she answered yes.
What have you done after getting "Oracle not available" message?
After that we get Oracle Not Available. When I tried to connect to the Oracle via SQLPlus (startup command) it told me that init file does not exist and I recreate that file and put in the right place, then checked some files located in the D:\app\Administrator\admin\iwatchdb\scripts and D:\app\Administrator\product\11.2.0\dbhome_5\NETWORK\ADMIN. Almost in all of that SID and addresses were changed and pointed to the new database, I just alter them and replaced the Yelp (the name of the new database) with iwatchdb (our main database). So the first error solved, and when I tried to start the database up it told me that control files do not exist! and I checked the address that sqlplus showd in the error and it was right! the control files were deleted from: D:\app\Administrator\oradata\iwatchdb (CONTROL01.CTL) and D:\app\Administrator\flash_recovery_area\iwatchdb (CONTROL02.CTL)
- What is the latest error you get in the alert.log file?
do you mean this file? D:\app\Administrator\diag\rdbms\iwatchdb\iwatchdb\alert\log.xml
These are the latest ones:
<msg time='2013-06-19T19:41:46.498-07:00' org_id='oracle' comp_id='rdbms'
client_id='' type='UNKNOWN' level='16'
host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13' module=''
pid='4692'>
<txt>Trace dumping is performing id=[cdmp_20130619194146]
</txt>
</msg>
<msg time='2013-06-19T19:41:46.540-07:00' org_id='oracle' comp_id='rdbms'
msg_id='dbkh_generate_new_failure_alert:2777:3311820762' client_id='' type='ERROR'
group='DRA' level='1' host_id='DD77KKS1'
host_addr='fe80::d4a:8bff:b402:6cfe%13' module='MMON_SLAVE' pid='1384'>
<txt>Checker run found 1 new persistent data failures
</txt>
</msg>
<msg time='2013-06-19T19:41:46.658-07:00' org_id='oracle' comp_id='rdbms'
client_id='' type='UNKNOWN' level='16'
host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13' module=''
pid='4496'>
<txt>ORA-00227: corrupt block detected in control file: (block 1, # blocks 1) ->(I copied control files from another database but it didn't work)
ORA-00202: control file: 'D:\APP\ADMINISTRATOR\FLASH_RECOVERY_AREA\IWATCHDB\CONTROL02.CTL'
ORA-00227: corrupt block detected in control file: (block 1, # blocks 1)
ORA-00202: control file: 'D:\APP\ADMINISTRATOR\ORADATA\IWATCHDB\CONTROL01.CTL'
</txt>
</msg>
<msg time='2013-06-19T19:41:46.659-07:00' org_id='oracle' comp_id='rdbms'
msg_id='opiexe:3056:2780954927' client_id='' type='NOTIFICATION'
group='admin_ddl' level='16' host_id='DD77KKS1'
host_addr='fe80::d4a:8bff:b402:6cfe%13' module='sqlplus.exe' pid='4400'>
<txt>ORA-205 signalled during: ALTER DATABASE MOUNT...
</txt>
</msg>
<msg time='2013-06-19T19:41:47.606-07:00' org_id='oracle' comp_id='rdbms'
client_id='' type='UNKNOWN' level='16'
host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13' module=''
pid='4692'>
<txt>Trace dumping is performing id=[cdmp_20130619194147]
</txt>
</msg>
<msg time='2013-06-19T19:42:45.282-07:00' org_id='oracle' comp_id='rdbms'
msg_id='dbgripsto_sweep_staged_obj:14105:70631439' type='ERROR' group='ami_comp'
level='8' host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13'>
<txt>Sweep [inc][9769]: completed
</txt>
</msg>
<msg time='2013-06-19T19:42:45.599-07:00' org_id='oracle' comp_id='rdbms'
msg_id='dbgripsto_sweep_staged_obj:14105:70631439' type='ERROR' group='ami_comp'
level='8' host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13'>
<txt>Sweep [inc][9706]: completed
</txt>
</msg>
<msg time='2013-06-19T19:42:45.907-07:00' org_id='oracle' comp_id='rdbms'
msg_id='dbgripsto_sweep_staged_obj:14105:70631439' type='ERROR' group='ami_comp'
level='8' host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13'>
<txt>Sweep [inc][9705]: completed
</txt>
</msg>
<msg time='2013-06-19T19:42:45.917-07:00' org_id='oracle' comp_id='rdbms'
msg_id='dbgripsto_sweep_staged_obj:14105:70631439' type='ERROR' group='ami_comp'
level='8' host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13'>
<txt>Sweep [inc2][9769]: completed
</txt>
</msg>
<msg time='2013-06-19T19:42:45.918-07:00' org_id='oracle' comp_id='rdbms'
msg_id='dbgripsto_sweep_staged_obj:14105:70631439' type='ERROR' group='ami_comp'
level='8' host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13'>
<txt>Sweep [inc2][9706]: completed
</txt>
</msg>
<msg time='2013-06-19T19:42:45.920-07:00' org_id='oracle' comp_id='rdbms'
msg_id='dbgripsto_sweep_staged_obj:14105:70631439' type='ERROR' group='ami_comp'
level='8' host_id='DD77KKS1' host_addr='fe80::d4a:8bff:b402:6cfe%13'>
<txt>Sweep [inc2][9705]: completed
</txt>
</msg>

Monitor Inspection Load IPS ASA-SSM-20

All,
I am aware there is a feature request but don't see any updates. Taking the chance here that its fallen through the cracks and someone has figured out another way to monitor inspection load on ASA-SSM-20 IPS. We are currently running 7.0(5a)E4. I want to be able to use Solarwinds Orion to monitor Inspection Load on our IPS devices. Does anyone know if that is yet possible...if so how?
Thanks!

Bump +1

Correlating Cisco ASA-SSM-IPS Events/Logs

I have just configured a Cisco ASA-SSM-IPS10. An exciting feature of this decice is the ability to monitor, analyse, and correlate security events. Can anybody help with a documentation to simplify daily (or periodic) analysis, and correlation of the IPS Logs? As I am not yet to up to speed with this task yet, a "How-to" document would be just fine. Thank you.

Hi Chris,
Good to have you get on the case. I am yet to setup and ips manager software. Presently, I use an ASDM 6 interface, with this interface, I am able to view events and alerts, and perform other adminsitrative cores... The IPS manager express does it comes bundle with our device purchase? Does it contain necesary templates/docs for correlating events/Logs?

Evet Store on IPS ASA-SSM-10

Hi Guys.
I'm trying to find out the size of the evnet store for the IPS ASA-SSM-10 and if it's possible to configure how it will be overwritten.
I can't find any information about it.
Does anyone konw anything?
Best Regards

Ernesto
I found this in the configuration manual for the IPS:
The following password recovery options exist:
?If another Administrator account exists, the other Administrator can change the password.
?If a Service account exists, you can log in to the service account and switch to user root using the command su - root. Use the password command to change the CLI Administrator account's password. For example, if the Administrator username is "adminu," the command is password adminu. You are prompted to enter the new password twice. For more information, see Creating the Service Account.
You can reimage the sensor using either the recovery partition or a system image file.
If you want to see more detail here is the URL:
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055dfcd.html
HTH
Rick

How do I backup voice memos from iPhone 4 to my Macbook with iOS 6.0?

How do I backup voice memos from my iPhone 4 to my MacBook, with iOS 6?
I have synchronised them a hundred times but iTunes just doesn't backup my voice memos. And I haven't seen a playlist called "Voice Memos" on the left sidebar either...

Look for Voice Memos under Genres in iTunes.
With the phone connected, click on its name on the left. Then click on the Music tab on the right. Is "Include voice memos" checked?

How can I backup my iPad to another iPad backup on my same account. They're both listed on my list of backups, but it won't let me choose to backup to the one I want on my other iPad which I no longer have. But I specifically want the pictures

How can I backup my iPad to another iPad backup I have on my same iCloud account. The old one is totally gone. Both backups are listed on my iCloud account. So is there any way I can backup the one I have now to the other one. I really just want the pictures that are in the old backup. I have tried resetting and erasing all settings and data on the one I still have, but when I go to restore by iCloud; it only gives me the choice of restoring the same iPad. Then in iCloud>storage>backup, I'm still not able to choose which backup to backup to. I've even tried deleting the backup to the iPad I still have, then resetting all setting and data on the iPad, hoping that in resetting up the iPad it would give me the option to backup to my old iPad. But it doesn't. It still has memory of the backup of my newer iPad.
I JUST WANT THE PICTURES!!!
Thank you!!!
iPad (3rd gen) Wi-Fi + Cellular, iOS 6.1.3, iCloud Backup

You now need to get your pictures back! The similar to you, after I updated my iPad Mini, I can't get my some files on device. I tried many ways, fortunately, I got a tool from http://tinyurl.com/Data-Recovery-iPhone to help me recover lost files easily! It supports iPhone, iPad, iPod, etc iOS devices!

No longer use this email account but how do you backup the email that is...

No longer use this email account but how do you backup the email that is in the "example" folder, So that I can delete the account on my mail app?

Not sure what you mean. Deleting a POP account only deletes the messages stored in the account’s mailboxes, not any messages stored in custom “On My Mac” mailboxes, if that’s what you mean. It’s not that Mail goes after your mail trying to delete as much as it can. It’s just that if a mail account is deleted, then its mailboxes cannot exist anymore...
That said, instead of deleting the account right away, you can just disable it (i.e. turn OFF Preferences > Accounts > Advanced > Enable this account), leave it that way for some time, and delete it only after making sure you didn’t miss anything while the account was disabled.
BTW, if you back up your data, and the ~/Library/Mail folder in particular, you won’t have to worry about accidentally losing anything as a result of doing something like that...
Note: For those not familiarized with the ~/ notation, it refers to the user’s home folder. That is, ~/Library is the Library folder within the user’s home folder, i.e. /Users/username/Library.

How do I backup an IPS config (ASA-SSM-10)

Similar Messages

Maybe you are looking for