How to best use IDSM in promiscuous mode?

Hi folks
I need some input and ideas how to best set up my IDSM2 module.
Today I have the module set up to capture traffic from the 6513 using SPAN in both directions and two different firewalled VLANs as sources. The destination is data-port 1 on the IDSM. This setup is working fine but I'm curious as how to best use the second data-port. Our 6513 runs IOS 12.2(18)SXF3 and has a limit of only one SPAN session set up to capture an entire VLAN in both directions.
My idea was to use the second data-port as SPAN destination for our external/non-firewalled VLAN, but this isn't allowed.
Does anyone have or had a similar problem? Would using a VLAN access list with data-port 2 as destination be an option or are the dual IDSM interfaces mainly used for inline mode?
Regards
Fredrik Hofgren

Fredrik,
I am using VACLs in the switch that has the IDSM. This will preserve your SPAN sessions.
You can specify which vlans go to which port on the IDSM.
We actually have our external vlan set up as an inline vlan pair on data port 2.

Similar Messages

  • Configuring IDSM in promiscuous mode?

    Hello,
    I have two switch catalyst 6500 in VSS each with a IDSM module, I want monitor four VLANs three of them are vlans of users and one of servers, I am planning use VACLs to capture the traffic.
    My first quetion is how to configure the data ports of IDSM in promiscuous mode, if in the configuration guide say that by default the data ports are in promiscuous mode, so that means that I don't have to make any configuration in the data ports of IDSM?
    Second, if I have two switches 6500 in vss each with a IDSM module, I have to consider other configurations for this situation?
    The configuration of VACL that I will put is:
    ip access-list extended ACL_IPS
      permit ip any any
    vlan access-map VACL_IPS 10
      match ip address ACL_IPS
      action forward
    vlan filter VACL_IPS vlan-list 30 , 40 , 50 , 100
    intrusion-detection switch 1 module 4 data-port 1 capture allowed-vlan 30,40,50,100
    intrusion-detection switch 1 module 4 data-port 1 capture
    intrusion-detection switch 1 module 4 data-port 1 autostate include
    intrusion-detection switch 2 module 4 data-port 1 capture allowed-vlan 30,40,50,100
    intrusion-detection switch 2 module 4 data-port 1 capture
    intrusion-detection switch 2 module 4 data-port 1 autostate include
    Thanks for the help.

    The IDSM doesn;t need any special commands to inspect traffic in Promiscious mode.
    You'll want to put your IDSM management interfaces on a VLAN to talk with them:
    intrusion-detection module 4 management-port access-vlan 99
    Use the "forward capture" switch:
    vlan access-map VACL_IPS 10
      match ip address ACL_IPS
      action forward capture
    Get rid of the spaces between your VLAN numbers
    vlan filter VACL_IPS vlan-list 30,40,50,100
    If you put two IDSMs in teh same chassis you'll need to decide how to split traffic between them. You can assign different VLANs to each IDSM.
    - Bob

  • IDSM-2 - Promiscuous Mode

    I would like my IDSM-2 to run in a Promiscuous Mode ( and not INLINE mode)
    How can i configure it so that it works on the - " Block Nothing,Monitor Everything" principle.
    I need the blade to "Never" block the upstream devices like routers and Firewalls.
    By the way,how will the IDSM running in Promiscuous Mode even "know" of upstream routers and other network devices.
    Thanks !!!

    Hi,
    You can find how to configure IDSM-2 to run promiscuous mode here.
    http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055df92.html#wp1030752
    From there, you can find IOS vs. CatOS configuration as well as SPAN vs. VACL.
    Once that is done, you can find configuration guide here regarding IPS software. I will list both CLI and IDM in case you prefer one over the other...
    CLI -
    http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055df7d.html#wp1033699
    IDM -
    http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00804cf4c2.html#wp1031960
    In promiscuous mode, unless you configure blocking with blocking device, it will never block anything by default. Even with blocking, you can configure never-block addresses.
    CLI -
    http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055df77.html#wp1031471
    IDM -
    http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00804d1374.html#wp1037905
    IDSM will not know about which is what (upstream routers and other network devices) unless you specify them in 'never block' or 'blocking devices'
    Thank you.
    Edward

  • Configuring IDSM-2 Promiscuous Mode with MLS IP IDS

    I am having a problem configuring promiscuous mode with an IDSM-2 running 5.0(3)S181.0 in a 6509 with Sup 720 running IOS 12.2(18)SXD4. I am running router interfaces without VLANs so I have created an extended access list with a 'permit ip any any' and configured this on my interfaces with 'mls ip ids access-list-name'. I configured 'intrusion-detection module x data-port 1 capture' and 'intrusion-detection module x data-port 2 capture', and because of the caution note on page 14-12 of 78-16127-01 I also configured 'intrusion-detection module x data-port 1 capture allowed-vlan 1-4094' and 'intrusion-detection module x data-port 2 capture allowed-vlan 1-4094'. After that I can see the output counters rising in 'show 'intrusion-detection module x data-port 1 traffic' and 'show 'intrusion-detection module x data-port 2 traffic'. I can configure the IDSM-2 using the VMS management center, and I added my sensor to security monitor and set the level down to informational, but I don't even see any events or even the start-up informational message. Anyone have any idea what I missed?

    Here is a document on Configuring the Catalyst Series 6500 Switch for IDSM-2 in Promiscuous Mode.
    http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_configuration_guide_chapter09186a0080459221.html#wp1030752

  • How to Set HyperV NIC in Promiscuous Mode

    Is there any way to set up a NIC on a virtual HyperV guest in promiscuous mode?
    I want to try and run a web filtering product on a VM. Wireshark does not indicate that it is capturing all traffic.
    I have my switch port mirrored already and it works with a regular box but not with the VM.
    Any help would be appreciated.
    Thanks,
    Andy

    I was able to make wireshark capture all the packets.
    I followed this post:
       http://fixmyitsystem.com/2013/08/Remote-Wireshark.html
    The only diference is that use and Internal Virtual Network  to connect from the
    guest to the host.
    My hyper-v host IP, for this network is 169.254.107.1 (check yours by doing ipconfig)
    and the Guest is 169.254.107.20
    Steps:
      - Just get rpcapd (http://nmap.org/dist/nmap-6.40-win32.zip).
      - Unzip it and install it on the hyper-v host
        Open PowerShell
        Enter-pssession Coremachine    
        Silently install: winpcap-nmap-4.02.exe /S
      - Next up you will have to create a firewall exception for
        this to be reachable from the management machine.
        netsh advfirewall firewall add rule name="Remote WinPcap" dir=in action=allow protocol=TCP localport=any remoteip=169.254.107.20
        (to turn on  the rule) netsh advfirewall firewall set rule name="Remote WinPcap" new enable=yes
        (to turn off the rule) netsh advfirewall firewall set rule name="Remote WinPcap" new enable=no
      - Navigate to C:\Program Files\WinPcap
        To start to packet capture service use
            .\rpcapd.exe -p 2002 -n
      - Get the GUID of the network card you want to use in WireShark  
          wmic nic where PhysicalAdapter="TRUE" get Description,GUID,MACAddress,Name,NetConnectionID
      - on wireshark
        Select Capture Options
        Click Manage Interfaces
        Select Local Interfaces tab and check the Hide box next to all of them
        Select remote Interfaces tab
        Click add button
        For the host specify the hostname or IP Address  
            (I use an internal network to conect to the host)
             My host IP is 169.254.107.1 and the Guest is 169.254.107.20
        The port default is 2002 (set with the -p switch earlier)
        Null authentication as set with the -n switch earlier
        OK
        You should now see a number of interfaces added
        Click Close
      - There will be a buffer size warning but it can be ignored, and hey presto,
        you are capturing packets from a remote  non GUI machine.  
        The process from here on in is the same as you would use WireShark with
        local traffic capture.

  • How to best use mail in 2 computers?

    Hi, I now have 2 computers (an imac and a macbook) connected to an airport extreme. I setup a new email address which SMTP forwards mail for the user of the macbook. However, when you click mail on the macbook, it seems to still be showing the mail of the imac. I may want to be able to access that first email, but I want to be able to primarily open to the new email address when on the macbook. Also, I noticed that when I do view my original email on the macbook, it doesn't reflect things I've already read and deleted from the imac....
    Just wanting some advice on best use of 2 computers with mail.
    thanks alot!

    Before making any changes, be sure to save a copy of all your important mail to an external hard drive, CD, DVD, or flash drive. With Mac OS X Mail, that means copying the entire Users -> yourname -> Library -> Mail and Mail Downloads folder after making sure in Mail your folders are "On my computer" as opposed to on .Mac or your internet service provider. Then you can setup both e-mail accounts as IMAP accounts. And then when you want to backup to one computer or another just option key -> drag mail to the local folder of that computer. A green and white plus sign should appear. If not option key, it is command key (I'm not at my Mac right now, but it is one of those commands).
    Thus both computers can act as a backup of each other's Mail. Note, this will only work if both machines are running 10.4 or newer. If one is not, then you have a problem, and might have to use a third party mail client.

  • How can i use IDSM-2 in inline mode for more than two VLANs?

    can i use the IDSM-2 in inline mode to be ips to more than two VLANS
    like this or it isn't
    intrusion-detection module 5 data port 1 access-vlan 10,20,30,40,50
    intrusion-detection module 5 data port 1 access-vlan 100,200
    thank u all for your help

    The IDSM-2 ports need to be configured as trunk ports with multiple vlans rather than as access ports.
    http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00807517eb.html#wp1068377
    And instead of creating an inline interface pair by pairing Gig0/7 with Gig0/8 within the IDSM-2 configuration, you would create inline vlan pairs.
    With an inline vlan pair you pair 2 vlans on the same interface.
    You can have up to 255 inline vlan pairs on each interface (assumining you keep the total traffic from all of the pairs within the IDSM-2s performance limit of around 500Mbps)
    How to create inline vlan pairs:
    http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00807517bb.html#wp1047852
    The other aspect you need to be aware of is that not all IOS versions will support configuring the IDSM-2 data ports as trunk ports for inline vlan pairs.
    Your best bet is to use 12.2(18)SXF4 or a later version on the 12.2(18)SXF train.
    The 12.2(33)SR train does not currently support the trunk feature for the IDSM-2.

  • How to best use Multi-Channel Plug-in: Miroslav Philharmonik

    Hello everyone,
    I recently purchased the Miroslav Philharmonik sound library and am learning to use it. You can assign different instruments and sounds in up to 16 different channels within the plug-in. I've quickly learned that this is a very important feature to use in order to have, for example, all the different violin articulations (e.g. legato, staccato, pizzicato, detache, etc.) at your disposal at once and within one instance of the plug-in. The only problem is, I'm not really sure how to manage changing MIDI channels within the arrange window.
    Let's say I have the 4 previously mentioned violin sounds loaded into Channels 1-4 in the Miroslav plug-in, which I have inserted into the Channel Strip for Inst 1. Let's say I play four bars of legato, then want to switch to staccato for four bars. How do I do this? I know I can switch the MIDI Channel from 1 to 2 in the channel strip info window, but is this automatable for play-back? I have just a basic M-Audio MIDI keyboard with pitch bend, mod wheel, octave +/-, advanced functions button, and volume. I've never worked with a multi-channel plugin before and would love any and all suggestions on how best to use this feature! Thanks!
    David

    Doesn't the Miroslav Plug In support keyswitches? Using these there would be no need to setup a Midi channel for each articulation as all articulations would reside in the same patch on the same Midi channel and you would just toggle between them by using pitcches which are not within the range of the corresponding Instrument.

  • How do I use the buffered counting mode at a fixed frequency?

    Hi-
       I'm using a PCI-6259 M-series board with the Nidaq MX
    drivers in Labview 7.  I am trying to use one counter to do
    buffered edge counting (eg. count how many pulses appear on one input
    in 400 successive time bins of 10 uS each following a digital start
    pulse).  That is, my inputs are:
         Start Pulse (from experiment)
         Count Pulse (from a photomultiplier tube in the experiment)
    And I want to know:
        # of pulses from 0 to 10 uS after the Start Pulse
        # of pulses from 11 to 20 uS after the Start
    Pulse  (or, equally good, # of pulses from 0 to 20 uS....I can
    subtract later)
        # of pulses from 3991 to 4000 uS after the Start Pulse (or, # of pulses from 0 to 4000 uS...same thing)
       The Count Digital Events-Buffered-Finite-Ext Clk.vi sample
    appears to do half of this.  I can set this up CTR0 with the Count
    pulse (and possibly add the start pulse as an Arm Start....I can't use
    a Start Trigger, right?).  However, I need to generate a Sample
    Clock Source at 100 kHz (to trigger the card to buffer the counter
    value and start counting in the next bin).  So, I tried to set up
    CTR1 along the lines of Gen Dig Pulse Train-Finite-Dig Start.vi for
    generating a finite pulse train starting on a digital trigger, and
    connecting the output from CTR1 to the Sample Clock Source on
    CTR0.  However, I get an error -50103 saying the specified
    resource is reserved if I do both at the same time.  But, I can't
    see any resource conflicts...the pulse generation on CTR1 works fine
    alone, as well as the buffered counting on CTR0, and all the PFI pins
    are different.  Is there some reason I can't use both counters at
    the same time?
    I think I can use the FREQOUT pin on the card to generate a Sample
    Clock Source at 100 kHz, since I think this is independent of CTR0
    & CTR1.  However, I can't trigger the FREQOUT to always start
    when I get a Start Pulse (as I can if I trigger a Digital Pulse Train
    to start on a digital trigger...or can I?)...so my bins will move
    randomly by up to 10 uS.
       This is an unrelated topic, but is there a discussion of
    the relationship between the terminology in the manuals describing the
    cards (SOURCE, GATE, OUTPUT terminals) and the terminology in NidaqMX
    (Source Clock/SrcClk.Source, CI.CountEdges.Term, CO.Pulse.Term)? 
    Eg. is CTR0.GATE always the same thing as SrcClk.Source, or does it
    depend on the mode of operation?  If the M-series hardware manual
    says to connect something to the SOURCE input, how do I assign an
    alternate PFI pin to that SOURCE input in Labview?  Does it depend
    on the counter type, or is it always the same?

    Dave,
    Hi, you brought up several questions / issues -- let me see if I can help with some of them:
       I can set this up CTR0 with the Count pulse (and possibly add the start pulse as an Arm Start....I can't use a Start Trigger, right?).
    Yes, you could set up this way.  Also, as far as I know you're also correct that you need to configure for an "Arm Start" trigger using the DAQmx Trigger property node.  The "Arm Start" trigger is used for counter input (measurement) apps while the regular "Start Trigger" can be used for counter output (pulse generation) tasks.  I don't think I've experimented with recent versions of DAQmx though so it may have changed in 7.4 or 7.5
    ...I tried to set up CTR1 along the lines of Gen Dig Pulse Train-Finite-Dig Start.vi for generating a finite pulse train starting on a digital trigger, and connecting the output from CTR1 to the Sample Clock Source on CTR0.  However, I get an error -50103 saying the specified resource is reserved if I do both at the same time
    I highlighted the problem -- the FINITE pulse train.  DAQmx uses CTR0 as a "helper" when you generate a finite pulse train on CTR1.  It would generate a single pulse whose width corresponds to the exact amount of time needed for CTR1 to generate its specified # of pulses.
    For your specific app, I think you could generate a triggered continuous pulse train with CTR1 -- this wouldn't need to use CTR0 as a helper.  The Start Pulse would arm CTR0 at the same instant that CTR1 is started.   If you set up CTR0 to acquire on the trailing edge of CTR1's pulses, then you'll get the time bins you want.
    A final slight mod would be to setup CTR0 for measuring buffered periods (set units == "Ticks") instead of counting edges.  In that mode, you wouldn't have to do the subtraction at the end.
       This is an unrelated topic, but is there a discussion of the relationship between the terminology in the manuals describing the cards (SOURCE, GATE, OUTPUT terminals) and the terminology in NidaqMX (Source Clock/SrcClk.Source, CI.CountEdges.Term, CO.Pulse.Term)?  Eg. is CTR0.GATE always the same thing as SrcClk.Source, or does it depend on the mode of operation? 
    There's an NI app note and some discussion forum hits if you search the site for "daqmx terminology."
    If the M-series hardware manual says to connect something to the SOURCE input, how do I assign an alternate PFI pin to that SOURCE input in Labview?  Does it depend on the counter type, or is it always the same?
    Usually, that choice would be available under the DAQmx Channel property node.   There'll be some place to define where the input signal is coming from, generally with "Term" or "Terminal" as part of its name.   Sorry I can't be more specific as I'm not at my LV computer now.
    Happy counting!
    -Kevin P.

  • How to best use iPhoto for organizing but PSE for editing?

    I'm new to Adobe PSE and trying to figure out how to manage a workflow between iPhoto - which I want to use to manage and organize pictures, and PSE9 -where I want to do all of my editing.  I thought the best way would be to open an iPhoto event from PSE9 and do the edits but PSE doesn't seem to recognize the iPhoto '11 file structure when browsing to open files.  I'm also confused as to whether I would be able to revert to original after editing if using PSE9 as the editor, and if so, how?  Appreciate any thoughts or advice...

    You need to either set PSE as your external editor or export the photos from iphoto before editing then reimport the edited photo. Quick tutorial on both methods:
    http://barbarabrundage.com/2010/11/29/using-photoshop-elements-9-with-iphoto/
    Never try to save back into the iphoto library from outside iphoto, though.

  • How To Best Use Three Drives in a Laptop Setup

    Hi Adobers,
    I've got a laptop with the following specs:
    CPU Type - Intel Core i7-3610QM
    CPU Speed - 2.3GHz
    CPU ID - 306A9h
    Integrated Graphics - Intel Ivy Bridge
    Discrete Graphics 1 - Nvidia GT 650M
    Total Memory - 12GB
    So I removed the optical drive and the hard disc drive so that's two drive slots available for whatever and I have an mSata slot so that's another drive option. I will be creating kinetic typography videos no more than 8 minutes long with minimal work in Premiere Pro which also would not be longer than 8 minutes. Now back to my laptop, the mSata slot and primary drive slot is Sata 3 and the optical disc slot is Sata 2. With that being said I was thinking about getting an mSata 128GB for the OS and programs. For the optical disc slot I would put in a HDD(in a caddy of course) for storage and then another HDD or SSD in the primary drive space as cache. My concern is if this is the right approach and if so then how much space should be on each drive including the mSata? If this is not the best configuration then what do you fellow Adobers suggest that I do regarding what types of drives I should use, such as SSD vs HDD, what should be the purpose of each drive, and how big should each one be? Also should I bump up my memory to 16GB or is that unnecessary?
    Thank You,
    Gio

    >Integrated Graphics - Intel Ivy Bridge
    >Discrete Graphics 1 - Nvidia GT 650M
    If you already know about dual video problems, just ignore this... otherwise, set your computer to only use the nVidia
    -http://helpx.adobe.com/premiere-pro/kb/error---preludevideo-play-modules.html
    -http://forums.adobe.com/thread/1001579
    -Use BIOS http://forums.adobe.com/thread/1019004?tstart=0
    -link to why http://forums.adobe.com/message/4685328
    -http://www.anandtech.com/show/4839/mobile-gpu-faceoff-amd-dynamic-switchable-graphics-vs-n vidia-optimus-technology/2

  • Re:  Leone's post May 2014 about how to best use an external drive with Aperture

    I am trying to find Leone who had a great post May 2014 to Diane. I posted tho same message as a 'Reply' to the Leone/Diane posts but then was worried it would not show up since that was some time ago so I decided I should post it as new.  Apologies if it comes through twice.   I am having trouble as indicated below:
    I found this response to the question about Aperture and external hard drives from last May.  I bought a WD My Book 4TB and need to back up photos I have in Aperture (many!) to free up space.  I am a photographer and need to be able to plug the external drive in as needed, pull a photo out from the WD and back into Aperture to work on it if needed.
    I read your directions to Diane and have the external drive formatted Mac OS Extended (Journaled).  I read the two ways you suggest to move part or all of my library to an external drive and still be able to use it in Aperture with all the metadata saved, as I need to continue to work with the images.  I am not completely clear about the advantage of the 'referenced' method but decided to go with the Split Library because it sounded like the Referenced method would still keep originals (and take space) in Aperture.  I'm not sure about this, but that was what I chose.
    I have backed up my computer, formatted the drive then went to Aperture to begin.  I do the 'Export' and it shows the external drive it will go to but when I click 'OK', it says "EXPORT LIBRARY FAILED - Library could not be create because the file system of the destination volume is not supported."  I doubled checked to be sure the drive was Journaled which it was.  I did call WD and talk to them but they told me this was outside their area.
    Also, in Aperture, I have my photos in Projects by yymmdd.  Is it possible to transfer Projects into the ext. drive without having to break them out of the Projects?
    Any direction anyone might give would be greatly appreciated, Sandy

    Hi Sandy,
    I suggest taking a week or two to get to know Aperture better before proceeding.  Aperture can do many things, and can do what you want.  It's important to be specific about what you want, however.  From what you've said, it appears that you don't yet know.
    bybeeler wrote:
    [1] I found this response to the question about Aperture and external hard drives from last May.  I bought a WD My Book 4TB and need to back up photos I have in Aperture (many!) to free up space.
    [2] I am a photographer and need to be able to plug the external drive in as needed, pull a photo out from the WD and back into Aperture to work on it if needed.
    [1] A back-up is a copy of digital files stores on a separate device.  A back-up is recommended because drives fail, and humans make mistakes.  A back-up is not used to free up storage space.
    [2] Aperture can be set up in many equally-usable ways.  The program files reside (almost always) on your system drive.  The data files can be anywhere you want them, as long as they are on locally-mounted drive(s).  The main data file is your Library.  The best place for it is on the drive that has the fastest throughput to your logic board.  This is, in nearly 100% of machines, the system drive.  But Aperture functions well with Libraries of secondary drives — internal or external — with sufficient throughput.  USB-3 and Thunderbolt I (& II) provide sufficient throughput for using an Aperture Library on a secondary drive.
    Nearly all photographers will fill whatever storage space is available (making data is what photographers do).  The question is: what do you do when your Library no longer fits on your system drive?  (And remember, you should leave at least 10% (I recommend 20% for heavy users of Aperture) of your system drive free.)  The answer depends, primarily, on whether your computer is portable or fixed in location. 
    If fixed, just buy a more-than-large-enough secondary drive of USB-3 or faster throughput, mount it permanently, and move (using Finder) your Library to it.
    If your computer is portable (and you can't increase the on-board storage), you have to select the best from several confusing alternatives:
    • Put your Library on an external drive with throughput at least as fast as USB-3
    — Pros:  Easy to maintain and back-up.
    — Cons:  Must have drive with you in order to use your Library.
    • Leave your Library on your system drive, but relocate your Images' Originals to an external drive.
    — Pros:  You can work on your Library without having the external drive available.
    — Cons:  You can't export (except Previews), Print, or make adjustments until your external drive is mounted.  Significantly more difficult to administer, especially importing and backing-up.
    • Leave your Library and and _some_ of your Images' Originals on your system drive, and relocate most of your Image's Originals to an external drive.
    — Pros: You can do any work on those Images whose Originals are stored in the Library regardless of where the external drive is.
    — Cons: Yet another level more difficult to administer.
    If you are comfortable with the administrative overhead, the third set-up will be the most rewarding.  Keep all _current_ Images Originals inside your Library, and routinely relocate the Originals of Images no longer current to the external drive.
    In no case is it recommended that you at any time remove from your Library an Image (not the Original — the Image in Aperture) that you expect to ever use again.
    HTH,
    —Kirby.

  • How to effectively use Character Styles

    Hello, I am fairly new to InDesign, but have an extensive background with FrameMaker. I am having trouble figuring out how to best use character styles in ID, because of the difference between it and FM.
    Lets say I have two different body text styles, which use different fonts or different sizes, each of which is saved as a paragraph style.
    In Framemaker, when you go into the Character Style editor, for each value you can select the value "As Is". So if I want to make a Bold character style, I leave the font and size attributes set to "As Is" and I change only the weight attribute to Bold.
    Now, I can select either Body Text 1 or Body Text 2 for the paragraph style and if I want to bold a word, I just highlight that word and select the Bold character style. The text is bolded but everything else that is unique to that paragraph style remains. If I ever need to unbold the word, I can just select it and then select No Style from the Character Style catalog
    But in ID, it looks like you have to define the value for each attribute in the Character Style editor. So I would need to create two separate bold styles, one for each paragraph style, because if I define the font and size, it will switch those  values as well as the weight. And if I need to create a separate Bold Character style for each paragraph style in which the default font is not bolded, what is the advantage of using character styles? Why not simply highlight the text and select the bold value from the Character palette, which then modifies the paragraph style just for those words that you bolded?

    Thanks,
    I was looking at some existing documents, which I think were created by folks who didn't know what they were doing (I am new to this job and all of the previous folks doing what I do are gone - and they clearly did not understand how to properly use styles). All of the fields had values in them, and when I didn't see an "As Is" value, it never occurred to me that I could just highlight the value and delete it to get rid of it.
    When you use a bunch of different Adobe products, even though they  have  fairly similar user interfaces, it is those differences that really get you.....
    Thanks, again

  • Getting error message that states itunesexe has been set to run in compatibilty mode for an older versions of windows for best results turn off compatibility mode for itunes before you open it .How do i turn off compatibility mode?

    recieved error message that states" itunes exe has been set to run in compatibility mode for an older versions of windows for best results turn off compatibility mode for itunes before you open it. How do i access compatibility mode and turn it off ? Believe i have Windows 7.

    Try the following document, only be sure that none of the boxes in the compatibility tab are checked (not just the compatibility mode box itself): 
    iTunes for Windows: How to turn off Compatibility Mode

  • I was trying to get the iOS 8.2 on my iPhone 5 but then it stopped and my phone is now on recovery mode I have pictures I need and they did not all fit on iCloud  how can I use the phone again with ALL my pictures and videos without restoring it?

    I was trying to get the iOS 8.2 on my iPhone 5 but then it stopped and my phone is now on recovery mode I have pictures I need and they did not all fit on iCloud  how can I use the phone again with ALL my pictures and videos without restoring it?

    Contacts are designed to be synced to a supported application on the computer or a cloud service.
    Pictures taken with the device are designed to regularly be copied off the device to a computer as would be done with any digital camera.
    If you have failed to use the device as designed it may be too late to recovery anything.
    Is the device regularly backed up to a computer via iTunes?  If so, the most recent backup (when restored to a replacement iOS device) should contain all contacts and pictures as of when the backup was created.

Maybe you are looking for

  • Outlook Anywhere not working for some users

    Hi All, I am having a strange issue today with a customer - Outlook Anywhere has been enabled on their Exchange 2010 environment, but it doesn't work for some users. Using the ExRCA I have been able to identify the following error on the users who ar

  • Photostream not working

    I have PS turned on on both my new Macbook Pro (mid 2012) and on my iPhone 4s. The photos are not showing up in iPhoto but they are showing up in the photo stream on my computer. Help? Thanks.

  • Mail Stops Receiving Mail After Awhile

    I just installed Leopard today, and all of a sudden Mail isn't working properly. I didn't change any of the POP or STMP settings from the last version -- of Mail, and of my system. When the computer first starts up, Mail works fine for a while. Then

  • Fielding in the input record is delimited by comma and assign to local vari

    Dear All, Please help me on below query .thanks in advnace Declare l_sub VARCHAR2(100) := 'a,b,c,d,.......Z'; l_1 VARCHA2(1); l_2 VARCHA2(1); l_3 VARCHA2(1); l_4 VARCHA2(1); l_26 VARCHA2(1); BEGIN I want to fetch the each value separated by comma to

  • Why does rotating a layer cause image size to increase?

    I was working on the top layer of a PSD document and did a custom rotation of 45 degrees so I could get a better painting angle.  When I rotated the layer back I noticed my image size had increased from 10 x 8 inches to 18.3 x 18.3.  When I tried to