Ironport s670 blocking users randomly. Os build 7.1.3-031

I have migrated an old ironport wsa to new s670 appliance, the configuration is same. It worked fine for about a month but now it is blocking legitimate users randomly.
It is happening frequently and there is no pattern for this issue, it's totally random and non predictable. Suddenly it will block the user and after 5 minutes it starts working again. After few hours some other user will fave the issue.
Is there anyone here who faced similar issue or anyone know about any bug in this OS version which can be fixed with version upgrade.
Thanks

I have experienced a very similar issue recently with a s370 appliance. Troubleshooting led to identifying an incorrect parameter in the authentication settings on the box. In our case the surrogate timeout had been set to 360 seconds. This seemed to lead to an increased load on our AD servers and after resetting it to 3600 seconds we have not seen one of these five minute outages since. We were experiencing them on a daily basis for a few days before we tried this. Cisco support did not confirm that this was an issue, though it seems like more than a coincidence that the outages started after changing that parameter.

Similar Messages

How do I adjust the HTTP server receive timeout for one site on Ironport S670

Hi All,
How do I adjust the HTTP server receive timeout for one site on Ironport S670?A web based application can take a long time (45 to 60 minutes) to fill a form once a user Login.The proxy will timeout the connection before the result comes back.How do I resolve the issue?
Thanks

Sandeep,
There is no option to adjust timers for one specific website. Any changes will affect all websites. The setting is under Security Services > Web Proxy. If only one site is being problematic for you, I'd recommend you consider bypassing it.
Is this an HTTPS site?
You may want to open a TAC case and have them take a deeper look into this.
-Vance

How to Block user from Sending IM or Hide Presence of there user who is not in his department

Hi All,
How to Block user from Sending IM or Hide Presence of there user who is not in his department.
Thank you

Hi Jp,
Method 1:
You can use the Enhanced Privacy Mode in Lync 2013
<section class="ocpSection">
Enable Privacy Mode
By default, everyone except Blocked Contacts can see your presence status. To modify the privacy settings, you can do the following:
In the Lync main window, click the Options button.
In the Lync - Options dialog box, click Status, and then do one of the following:
Click I want everyone to be able to see my presence regardless of system settings (override default settings).
Click I want the system administrator to decide - currently everyone can see my presence but this could change in the future.
</section>
About Enhanced Privacy Mode
If your organization has enabled Enhanced Privacy Mode in Lync, you can choose whether to limit visibility of your presence information to only those people you’ve added to your Contacts list. You do that by selecting one of the following on the
Options->Status window:
I want everyone to be able to see my presence
I only want people in my Contacts list to see my presence
Method 2:
Using Privacy Relationship, you can block a particular user by adding him to blocked contacts
Anil Kumar (MCITP)
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Block users in Oracle Identity Manager 9.1.0.2

Hi,
I have a status query (User Locked) user in Oracle Identity Manager 9.1.0.2.
The option to block users, seen in the web administration console of Oracle Identity Manager appears in a disabled state. As I can enable this functionality in Oracle Identity Manager 9 ..?
Thanks for the support

Didn't get your question exactly.
Whenever someone tries to login with wrong password then he gets Locked into OIM. You'll have to go to Admin Console and Unlock it. You can also do this from DB as well.
To lock user from Admin console, you'll have to create a custom button and extend the same action class to Lock that user into OIM.
Workaround
Create a UDF called LOCK.
Create a trigger on this UDF i.e. whenever LOCK value changes to TRUE then lock the user using DB query or API (UPDATEUSER -- Users.Lock User)

Is there solution to block user to adopt a Purchase Requsition to PO twice

Hi All,
Please advice. How can we block user to adopt a PR twice. In other words, let say user A have a PR number 3xxxxxxx then user A adopt this PR no to PO and get PO no 5xxxxxxx with status hold because of an error. In the next day another user B adopt the same PR no to PO and get another PO no 5xxxxxxx1 .
My question is ...
is there any solution / bapi to block another user to adopt the same PR when a PO already created even the status in held.
Thank you.
Nies

their is no standard process for hold PO you have to do it by enhansment take help from ABAP guy
regards

Block users from Home Hub 3 wi-fi without them kno...

Is there any way on the homehub 3 to block users on the wifi without it giving them a notification?
When you use the parental lock down between certain times when the user opens a web page it says they've been locked down by the hub but I don't want them to get this notification just to be completly disconnected?

Neogeo wrote:
Is there any way on the homehub 3 to block users on the wifi without it giving them a notification?
When you use the parental lock down between certain times when the user opens a web page it says they've been locked down by the hub but I don't want them to get this notification just to be completly disconnected?
No, you cannot do that with the home hub 3.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Blocking User to change the "Configure Columns"

Hi,
I have a folder which is "Files" views
Is there any to block User to change "Configure Columns" in folder option?
Thanks

cityec,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Block user from copying media files

how to block user from saving certain files like Avi,mP3 , ... to their computers by GPO ?
it is possible?

I do not think that you can go that by GPOs. However, this is feasible on File servers: http://www.petri.co.il/forums/showthread.php?t=45225
You might think about creating scheduled tasks that will run periodically and remove files with these extensions from the user profiles (...).
For GPO questions, please consider asking them here: http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP&filter=alltypes&sort=lastpostdesc
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

IM34, IMCCP1, IMCCP3 . How to block user not run these tcodes twice

Hi All,
I have plan value from cjr2 (cost element and activity type)
Normally we use IM34 (to roll up) the plan value then to copy plan value to investment management (imccp1) and copy plan to project budget (imccp3).
How to block user to run these tcodes twice. It seems that if user run it twice, the total plan and budget will be double. Is there any way to reverse?
PLz help...
Cheers,
Nies

thx

Users able to build reports and dashboards via the Web browser

Hi All,
My requiremts is "Users able to build reports and dashboards via the Web browser and perform ad-hoc queries and analysis online via the internet" .
Requesting to kindly let us me know the procedure to get resolve the above requirement.
Thanks,
KVR

Hi,
Go through the links below
Designing Microsoft Excel 2007 Chart
http://charts.jorgecamoes.com/how-to-create-an-excel-dashboard/
http://dashboardspy.com/dashboards/23/designing-microsoft-excel-2007-charts
SAP BUSINESSOBJECTS DASHBOARD BUILDER
http://www.sap.com/solutions/sapbusinessobjects/large/business-intelligence/dashboard-visualization/dashboard-builder/index.epx
http://www.sap.com/solutions/sapbusinessobjects/sme/reporting-dashboarding/index.epx
It may help you
Regards,
Marasa.

How can l block users from backing dating transactions

1. How can l block users from back dating transactions in SAP B1. It was discovered that, in production dept there is this allowance given to them to keep producing for the previous month in the new month; this according to line staff is to enable them meet up their monthly target, after a meeting with the management it was resolved to block that right of backdation of enteries. how can l correct this.
2. How can l change the decimal places backward in the general settings of administration of SAP B1( iniatially it was set to be 5 under Quantity now want to correct it to 3 how do l go about this).
Joel

Joel,
By forum rule, one question for one thread. I will answer you the second: If you are using 2007 version, the option to decrease decimal place is not available. Check this thread to know more:
Re: REDUCE NUMBER OF DECIMAL PLACES
Also note: this forum is just for B1 system administration. Please post it on the main forum.
Thanks,
Gordon

ISE, WLC: web auth, blocking user account

Hello!
We are implementing BYOD concept with ISE (1.1.4) and WLC 5508 (7.4.100).
On WLC there is SSID(WLAN) with MAC filtering without L2 security. For authentication user is redirected to the ISE Guest Portal.
Credentials are created at the ISE sponsor portal.
We create user account in ISE sponsor portal with one hour lease.
In 10 minutes we delete (or block) user credentials.
In spite of it the user is still able to work. Even if we manually disconnect client and reconnect it again, client opens the browser and there is no redirection to the ISE web auth page.
This happens because WLC thinks, that client is still associated.
There are session and idle timeout timers in WLC WLAN, but they can't solve the problem of automatic client session removing.
From my point of you, ISE must send some kind of reauth request to the user after account deletion, to make user authentication impossible .
In practice, ISE doesn't tell wlc or user, that client sesssion is blocked.
How the user account blocking process can be automated without manually deleting the client session from WLC client database?

It seems that there is some bug about CoA when deleting Guest accounts
CSCuc82135
Guests need to be removed from the network on Suspend/Delete/Expiration
When a guest user is deleted from the system, the RADIUS sessions associated with that guest user still exists.
Workaround Reissue the Change of Authorization using the session information from Monitoring reports for the sessions associated with that guest user.
http://www.cisco.com/en/US/docs/security/ise/1.1.1/release_notes/ise111_rn.html#wp411891
from BUG Toolkit there is Release-Pending in "Fixed-in" option.

Block users from downloading from internet

I'm curious as to what everyone is using to block users from downloading certain file types (.exe, msi, zip, bat, etc) from the internet? We had websense, now barracuda for a web filter but have major issues with filtering downloads from the internet. The main issues is filtering SSL sites.

Hello,
The WSA has a feature called Object Filtering which allows admin's to configure access policy parameters to block certain file types from being downloaded through the WSA. To apply the same settings to HTTPS requests the WSA would need to decrypt the request.
I Hope this helps.
Best Regards,
Michael Hautekeete
Customer Support Engineer
Cisco Content Security - Web Security Appliance
http://www.cisco.com/en/US/products/ps11169/serv_group_home.html
https://supportforums.cisco.com/community/netpro/security/web
https://supportforums.cisco.com/community/feeds?community=2091

Block user logon in CI

Hi
We have scenario where we have CI and 2 application servers. We want users to login only to applications servers. For this, we have created logon groups and configured users' GUI accordingly. The problem is some users directly give sapgui <CI> command in RUN command and get connected to CI. How can I avoid this? Is there any way by which I can block users login directly to CI?
Thanks
Javed

The problem is some users directly give sapgui <CI> command in RUN command and get connected to CI
You cannot avoid users connecting if they have the right to logon directly to the system... replace their SAPLogon to SAPLogon Pad so they cannot create or modify entries or Educate them with the reason why is wrong to logon directly to the CI.
Regards
Juan

Blocking User Submit Action in a OAF Page by disablin the button

See Blog entry :
http://mukx.blogspot.com/2009/12/blocking-user-on-submit-action-in-oaf.html
--Mukul

See Blog entry :
http://mukx.blogspot.com/2009/12/blocking-user-on-submit-action-in-oaf.html
--Mukul

Ironport s670 blocking users randomly. Os build 7.1.3-031

Similar Messages

Maybe you are looking for