IDSM should protect serverfarm on FWSM form outside/inside threats

Hi all,
We have 6509 with FWSM and IDSM.All vlans (servers,voice,users etc) are homed directly on the FWSM.We need to protect the serverfarm vlan from attacks originating from both inside and outside. All traffic comming from outside and headed for the servers as well as traffic from user vlans needs to be intercepted.So i am planning to put IDSM in inline vlan pair mode.Also i want the internet traffic first to hit fwsm and then idsm.
Single digit vlan exist on MSFC, double digit vlans pushed to FWSM. Bridging done by IDSM
MSFC
vlan 2
name SERVER-IDSM
vlan 3
name INTERNET-IDSM
vlan 4
name USER-IDSM
vlan 22
name SERVER-FWSM
vlan 33
name INTERNET-FWSM
vlan 44
name USER-FWSM
intrusion-detection module 4 data-port 1 trunk allowed-vlan 3,4
// Here vlan 3 (Internet) goes into IDSM and then FWSM. But i want traffic from internet to go to FWSM and then IDSM
interface g2/3
switchport
switchport mode access
switchport access vlan 3
description INTERNET
IDSM
conf t
service interface
physical-interfaces g0/2
admin-state enabled
description INTERNET
duplex full
speed 1000
subinterface-type inline-vlan-pair
subinterface 1
vlan1 4 //bridging
vlan2 44
description INSPECT-USER-TRAFFIC
subinterface 2
vlan1 3 //briding
vlan 33
description INSTECT-INTERNET-TRAFFIC
service analysis-engine
virtual-sensor
physical-interface g0/2 subinterface-number 1
physical-interface g0/2 subinterface-number 2
My primary aim is :-
1) All user traffic should first go to FWSM and then to IDSM and then if OK to servers
2) All internet traffic (from outside) headed to servers should first go to FWSM and then IDSM and then if OK to servers
How can this be achieved? I think the configuration posted above places IDSM in front of FWSM which is opposite of what i want
Regards.
Sonu,

By deploying the FWSM in front of the server farm, security is provided both to and from the server farm and between each server farm tier. I think the config you have provided will work.

Similar Messages

Able to paste in form outside fields in Adobe Reader

I have created a Form in LiveCycle Designer 8, saved it and re-opened it in Acrobat Pro to enable usage rights in Reader and re-saved it.
When opened in Reader it can be filled in and saved. the problem I'm having is that the user filling in the form is able to paste text in the form outside the fields. How can I prevent this? I don't want the form to be editable in any way other than completing the fields and saving the filled form.
Also, I have validated the date fields in the form so that the Display, Edit, Validation and Data patterns are(MM-YY) which triggers a customised error message. When the User clicks ok to the error message the date field retains what was incorrectly entered - rather than clearing it for correction - and focus is no longer on the field in question.
Is there a way I can prevent the user being able to enter anything in the date field other than via the drop down calendar? Even if I can, this obviously requires the user to enter a day which is superfluous to requirements, but I have read that the calendar can't be switched off so I'm not sure how to get around this, other than offering an explanation to the user to select any day as long as it is the correct month and year.
Any ideas?
I would really appreciate some help with these issues.

Thanks, I will do that. Loking fwd to testing.
Curious, will Arcobat.com ever have a similar feature where users can Save a Copy when/if the doc is opened from Acrobat.com - much like Google Drive (as it's supposed to work)?
I know you mentioned putting in a request for Save a Copy...but hopefully we'll eventually have an option to not only Save a Copy but also specify the location (ie Dropbox, local Documents, location on SD card, Acrobat.com, etc. vs only being restricted to the source when the file was originally opened. Or maybe just being able to pick a different folder than the source folder. I think either would be a great addition for both Android and iPad versions of Reader especially since many similar apps already allow you to do so.

Which iPad 4 should I buy if I live outside the US and I want wifi Celullar

I want to buy the new ipad from apple.com, i live outside the US, which carrier should i select to work celullar outside the us? or do i need to buy one factory unlocked?
thx...

Did you read the specs I linked to? All iPads have a sim card slot for local sim cards regardless of where worldwide. Again, a local carrier must offer local iPad data plans and a local sim card.
The Verizon, etc. carrier designations only have significance in the USofA where two networks are avaialable, GSM and CDMA. In the USofA if you subscribe to a USofA carrier using CDMA then you must purchase the iPad designed to use CDMA. But again and per the specifications, any post iPad2 iPad, GSM or CDMA will work worldwide on GSM networks.

User should only work on created Form

Hi all!
Here is my problem.
A user is working in B1. For example:With a double_klick on a Textfield and a user created Form will be shown.
No the User should only work with this Form until its closed! There should be no possibility to open an other form or so.
Like if you get a MessageBox, there is no other "normal" way to work on until you close this Messagebox.
May it is possible to let the Form act like such a Messagebox.
Thanks for replies..
Matthias

The Sample you speak of show the hack/workaround (Not true modal functionality).
From the sample:
    Private Sub SBO_Application_ItemEvent(ByVal FormUID As String, ByRef pVal As SAPbouiCOM.ItemEvent, ByRef BubbleEvent As Boolean) Handles SBO_Application.ItemEvent
        ' Don't let the user to move to other forms
        Dim EventEnum As SAPbouiCOM.BoEventTypes
        EventEnum = pVal.EventType
        If bModal And FormUID <> "Modal" Then
            oForm.Select() ' Select the modal form
            BubbleEvent = False
        End If
        ' If the modal from is closed...
        If FormUID = "Modal" And (EventEnum = SAPbouiCOM.BoEventTypes.et_FORM_CLOSE) And bModal Then
            bModal = False
        End If
    End Sub
In the sample the bModal bool set to true when opening the form block all events by selecting the modal form on each event and setting bubbleevent to false.. the EventEnum = SAPbouiCOM.BoEventTypes.et_FORM_CLOSE set the bModal to false so events can continue
Biggest problem with this is if you use a eventfilter (which you should do)... here you need to remove the event filter along with setting the BModal (not in the sample), and reapply it after form close.
<i>Kind Regards
Rasmus Wulff Jensen | http://www.b1up.net</i>

How to block running forms outside of the FORMS_PATH

I need to know if is there a way to block any form outside of the FORMS_PATH and allow just those located in the directory specified by FORMS_PATH
thanks beforehand.

Hi Alvaro,
I assume you have a "starter/main" form for your application. If that is the case (and if there is no need for the user to specify the form name explicitly), you can add "form" to the restrictedURLParameters (under formsweb.cfg) and also set the form name in there itself.
For ex.
form=login
restrictedURLparams=....,formAfter this, the user would not be able to specify the form name in the URL while running, which in turn, would restrict them running any forms (apart from the desired form you mentioned in the "form").
-Arun

Which dc and sc should add in build time form sld when integration uwl

hi
i have to create a webdynpro to show info from uwl, like follow
IUWLService uwlService=(IUWLService)PortalRuntime.getRuntimeResources().getService(IUWLService.ALIAS_KEY);
but i don't know which dc and sc i should add in build time form sld and use it.
i try add UWLJWF from sld, and ?
i develop with nwce ehp1
thank you

1) tc/je/security/api
2) tc/je/usermanagement/api
from ENGFACADE.
3) tc/kmc/bc.uwl/api
from UWLJWF

Anyway to build a form outside of Business Catalyst and connect it to the platform?

I am trying to do one of two thing to accomplish what I am trying to do. First I am trying to build an order form that allows a user to add a field as they go. So if I have three fields for one product. One for a product name, one for a SKU number, and one for a quantity. I would like the user to be able to fill this out and then if they have more products to add they can click a button that says add another item and then another set of fields shows up. I am either going to create all of these fields in a business catalyst form and then figure out how to hide these fileds with css and or javascript, or I need to build this form outside of business catalyst and figure out how to connect the form to the platform so I can still have it go through a workflow. Can anyone offer any suggestions or advice on how to do wither of these items?
Thanks

Hi Mike,
Rich has an idea. To get you started I've built something similar for booking multiple seats, but your form will not take bookings and instead it will be a standard form with some credit card fields. See this example http://demo.businesscatalyst.com/booking-multiple-seats
You will have to have a set number of fields. You can not add fields on the front end dynamically. Also, my example is quite primitive. You have to specify the number of products before you start adding them. You cna change this by adding something like "Add Another" field to the form whcih will reveal the next set of hidden fields and so on.
Before you start building anything note that you will have to use a seamless gateway. Can't use something like PayPal standard.
I hope that helps!
Mario

How should I apply patches to forms 6i?

Hi,
Someone told me that in order to work properly with forms 6i you have to apply patches.
How could we find that our forms 6i need patches in order to run properly on windows 2000 Server?
I have a metalink account, what patch of forms 6i I need and how should I download it and then how should I apply it to forms 6i from METALINK?
After applying required patch does forms 6i works properly in the future?
Thanks
Behari

Without having any details about your problem, there is no way of knowing if a "patch" will solve your problem. Additionally, there are no specific patches required which are needed to run on Windows 2000. All 6.0.8.x versions were certified on Win2k
However, the latest and last patch for Forms/Reports 6i is Metalink Patch ID# 4183804
This will make your Forms version 6.0.8.26

Form with inside a TabNavigator with FormItems

I have a Form that inside has a TabNavigator with differents tabs containing different FormItems, so the form is only one but the various FormItems are subdivided in different tabs.
The form works good but the FormItems inside the TabNavigator have bad alignment while the FormItems outside the tabs are ok.
Anyone has any tips to fix it? (code follows)
<mx:Form defaultButton="{btn}">
     // good align
     <mx:FormItem label="Name">
          <mx:TextInput />
     </mx:FormItem>
     <mx:TabNavigator>
          <mx:VBox label="TAB 1">
               // bad align
               <mx:FormItem label="Item in TAB 1" direction="horizontal">
                    <mx:RadioButtonGroup id="rb1" />
                    <mx:RadioButton groupName="rb1" label="N" value="0" />
                    <mx:RadioButton groupName="rb1" label="Y" value="1" />
               </mx:FormItem>
          </mx:VBox>
          <mx:VBox label="TAB 2">
               // bad align
               <mx:FormItem label="Item in TAB 2" direction="horizontal">
                    <mx:RadioButtonGroup id="rb2" />
                    <mx:RadioButton groupName="rb2" label="N" value="0" />
                    <mx:RadioButton groupName="rb2" label="Y" value="1" />
               </mx:FormItem>
          </mx:VBox>
     </mx:TabNavigator>
     <mx:ControlBar>
          <mx:Button id="btn" />
     </mx:ControlBar>
</mx:Form>

I've tried inserting textAlign in tabNavigator, formItems and VBoxes but the align of the formItems inside the tabnavigator still on the left. Any suggestion?

Static (outside , inside)

Hi All,
I want to achieve the below scenario with static NAT.
1. I have a firewall which is having two legs ( inside and outside). As usual inside security is 100 and outside is 0.
We have done a PAT for all the inside networks to access the outside network. Now the requirement is i have server in outside network which should be accessed by the inside network with a help inside ip address itself ( mapping the server to a free inside ip address and all the inside hosts will connect to the inside ip which intun communicates the outside ip address)
We tried to achieve the above using static (outside,inside ) command , but somewhat we are unable to communicate.
We created ACL as permint ip any any and applied on the both the interface. Proper route has been added in the Firewall to the ouside network and also we added route in the Outside network L3 Switch for the firewall inside network.
Please help us !!!
Attached a sample diagram ...
Regards,
Gan.

To initiate a connection from the outside to inside, firstly you would need a static NAT statement for your inside host.
So if the inside host is 10.10.10.183, this host needs to be statically NATed first (dynamic PAT won't work because that only works for outbound connection).
So static NAT for the inside host as follows:
If you don't want to NAT, then:
static (inside,outside) 10.10.10.183 10.10.10.183 netmask 255.255.255.255
If you want to NAT, then:
static (inside,outside) x.x.x.x 10.10.10.183 netmask 255.255.255.255
Then to actually NAT the outside host to an inside address:
static (outside,inside) 10.10.10.10 172.10.10.10 netmask 255.255.255.255
Then "clear xlate" and test it.
Hope that helps.

Itunes error. the data execution prevention pops up and says "to protect your computer, windows has closed this program. Data execution prevention helps protect against damage from viruses and other threat.

I have a windows Xp computer. and i needed to download the newest itunes to support my ipod touch. but now my computer doesn't let me open itunes. The the data execution prevention pops up and says "to protect your computer, windows has closed this program. Data execution prevention (DEP) helps protect against damage from viruses and other threat." I tried excluding itunes from DEP on settings but it still doesn't work. I don't know what to do. please help me!!!
thanks

try to select the computer cd/dvd autorun off.
I had the same problem, then Kaspersky software found a conflict suggesting me this solution.
Itunes now works...even if it always asks to set the cd/dvd autorun on when lunched.

Find the names of all open forms from inside a PJC

Hi,
is it possible to find the names of all open forms from inside a PJC (pluggable java bean)?
I have tried the window bean but it retrieves currently open windows and reads the title of each window, but what i need is to find the form name not the window title.
oracle forms version: 10g
Thank you
Edited by: user542352 on Jun 26, 2009 1:07 AM

You don't need to know names of all open forms to close them.
Try to do someting like this :
When you need to close all forms, set some global variable flag and call exit_form
in WHEN-WINDOW-ACTIVATED of each form check your global flag and if set, also exit_form.

Forms window inside applet doesnt show buttons

Hi everyone,
We are trying to migrate some apps to Forms10, ( coming from client-server 6i ) and there seems to b some problem with the size of the forms window inside the applet. I have tried the solution i read here about using javascript, which spwans a window whith applet and the forms ( closing the parent ). So, i get the browser window ( with no menu bar, just like I want ) but the trouble is the form doesn't show it's buttons ( close and maximize )... to get them in the applet i must double click the border of the forms window, and then they appear... but if i maximize it, they get out of range again... can anyone help me ?
thx in advance
Joao Castro

What Windows screen size settings are you working with... 800x600, 1024x768, 1280x1024?
It sounds like you are using up all the available space on the screen, and in Web Forms, the containing windows take up a few more pixels.

AIP-SSM outside inside dmz

hi
I'm reviewing the situation next three traffic zones outside, inside, DMZ,
service-policy xxxx-policy interface outside
service-policy xxxx-policy interface inside
service-policy xxxx-policy interface dmz_stgo
and I need to lower the level of examination but only in one area, which is the area inside,
such outside high-DMZ
DMZ-outside high
inside low-DMZ

Please give us some additional detail on whatyou mean by "lower the level of examination" on one of your interfaces. Did you want to apply a subset of the signatures? (then you'd go down the virtual sensor path) Or, did you want to filter the IP addresses/port reaching the sensor on that interface? (then you'd adjust the class-map ACL)

Is there any way to password protect access to a form?

We are going to use a form for a part of a clinical study and there are only 4 persons that should be able to enter information into this specific form.
I understand that I can choose to share the link to the form with only these appropriate persons but I want to know if there is any way I can password protect the access e.g. after they have clicked on the link, they need to write a password, then be able to fill in the form?
Thanks!!

Hi,
This is not something we currently support but you can add or vote on feature ideas: http://forums.adobe.com/community/formscentral?view=idea
If you need to add a new idea click "Create an idea" under "Actions" in the top right.
Thanks,
Josh

IDSM should protect serverfarm on FWSM form outside/inside threats

Similar Messages

Maybe you are looking for