ISE deny access to Android devices

I have a customer who likes to deny access to any Android devices on its guest service. (The network has an anchor WLC, the authentication is set as LWA)
First I tried setting a simple AuthZ rule indicating "if Device-OS equals Android, then Deny Access"
Also tried setting a profiled group. Any device belonging to this Android devices group must be denied.
It appears the results were not consistent enough. On my first tests, a Galaxy smartphone was not allowed to pass after the AUP, but after some tries the user got access.
I think something may be missing in the config, as it appears the ISE is not recognizing the Device-OS. Any device is added to the profiled group.
Some idea to troubleshoot and fix this requirement?
Regards

I did a quick test enabling DHCP profiling on WLAN in the WLC. I couldn't did extensive tests because the DHCP appears to not working, so I needed to back. I don't understand why enabling this option affects the DHCP functionality ...
Unfortunately I can't do extensive tests on productive network, so I would need to be sure about which parameters to change.
In lab (not the same environment to test) I have seen the ISE is able to identify a Galaxy smartphone as Samsung Device (by RADIUS probe), I guess by the OUI Endpoint, and some minutes later as Android (by DHCP probe) ... So, I wonder if it is possible to define a priority or preference over which probe apply first ...
In the ISE Endpoint details I found this
User-Agent Mozilla/5.0 (Linux; U; Android 2.3.6; es-us; GT-I9070 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
I guess here is where the ISE learns from the device is an Android, right?
Regards ...

Similar Messages

Access the android device webcam through adobe flash

Hi all,
I'm trying to access the webcam from a flash application on my android 2.3.3 but I cannot do it, It seems like the flash player doesn't has access to the hardware device.
If I try from some websites that provides simple demo for face detection, I get the error that the webcam cannot be found...
any idea?
thanks

As far as I'm aware, this will not be available in the next release of Flash Player (11) due in the next few weeks. I'd recommend opening a new feature request for it over at bugbase.adobe.com. I know we have this on our radar, but getting votes for a bug or feature request really helps to make a point.

ISE - Guest - permanent access for specific device

Hello,
In brief: I'm using ISE 1.2, 5508 wlc and few 3702-I APs - brodcasting 2 SSIDs: Internal and Guest (Internet olny). Guest SSID forces user to provide username and password through guest portal.
Is there any way to configure some policy on ISE to allow specified mobile device(s) (filtering by IMEI or MAC address) access to Internet via Guest network without necessity of provide username and password? An exception that is avoiding guestportal and/or permanent remember that particular device.

Hey kkoziarski,
It sounds like you are looking for the functionality of that known as Web Passthrough. Where the device can just view some TOC and possibly be presented with a Guest AUP. This is something that is doable with a Standalone WLC, as I am sure you know.
Funny thing is that I was coming here to post something along the same lines. I've spent the past week researching and trying some configs on both ISE 1.2 and ISE 1.3. It appears that the final answer is no. This wouldn't be performing any authentication and neither would it be applying any permissions to the device/user, which at that point - it wouldn't be utilizing any of the functionality of ISE.
What I have found is that there are 2 methods that can offer a similar experience, but will not be a true Webb Passthrough, and it will not be easily configurable.
1. Creating a customized HTML page for the WebAuth AUP, that would then have the username and password embedded in the code, and more than likely need to be linked to the Submit button or something of that nature.
2. Utilizing ISE policies on a per-WLAN basis and including specific attributes, which would then have to communicate with the above custom HTML page.
Any other users out there, please feel free to correct me if I am wrong! I wonder if they will ever come out with a feature as such :/

Opening device /dev/sg3 failed - access denied to /dev/sg* device file

Opening device /dev/sg3 failed - access denied to /dev/sg* device file (OB scsi device driver)
Got this message when running an automated RMAN job.
To my knowledge the only thing that has changed since being able to run RMAN jobs with OSB and not being able to run them is that the permissions on /usr/tmp were changed from drwxr-xr-x, not drwxrwxrwx.
Transcript below:
2010/01/27.04:03:20 ______________________________________________________________________
2010/01/27.04:03:20
2010/01/27.04:03:20 Transcript for job oracle/6142.1 running on backup01
2010/01/27.04:03:20
2010/01/27.04:03:20 (amh) qdv__automount_in_mh tape1 at 2010/01/27.04:03:20, flags 0x100
2010/01/27.04:03:20 (amh) mount volume options list contains:
2010/01/27.04:03:20 (amh) vtype 3, vid (null), vs_create 0, family PAS-RMAN, retain (null), size 0, scratch 0
2010/01/27.04:03:21 (amh) don't preserve previous mh automount state
2010/01/27.04:03:21 (amh) loaded volume has no barcode
2010/01/27.04:03:22 (amh) beginning pass 1
2010/01/27.04:03:22 (mmr) volset containing oid 20859 (vid PASWLY-000215, tag 000086L3) is closed
2010/01/27.04:03:22 (amh) 1 oid 20859 doesn't meet mount requirements - volume set is closed to further update (OB device mgr)
2010/01/27.04:03:22 (mmr) need next volume after oid 20543 (vid PAS-RMAN-018887, tag 000048L3) for append; its oid 20604
2010/01/27.04:03:22 (amh) 2 oid 20543 doesn't meet mount requirements - the next volume of this set is needed (OB device mgr)
2010/01/27.04:03:22 (mmr) oid 20949 (vid PAS-RMAN-018935, tag 000021L3) passes criteria
2010/01/27.04:03:22 (amh) 3 loading
2010/01/27.04:04:04 (mt) qdv__read_label() succeeded; read 65536 bytes
2010/01/27.04:04:05 (atv) automount worked
2010/01/27.04:04:05 (amh) 3 automount worked - returning
2010/01/27.04:04:05 (amh) end of automount at 2010/01/27.04:04:05 (0x0)
2010/01/27.04:04:05 Info: volume in tape1 is usable for this operation.
2010/01/27.04:04:05 (pvfw) at BOT
2010/01/27.04:04:05 (pvfw) previous state is invalid
2010/01/27.04:04:05 (alv) backup image label is valid, file 1, section 1
2010/01/27.04:04:05 (pvfw) invalidating tape position in mount db
2010/01/27.04:04:05 (ial) invalidate backup image label (was valid)
2010/01/27.04:05:17 (pvfw) space to EOD
2010/01/27.04:05:26 (pvfw) inspect_recs BSR: rtypes [0] = filemark
2010/01/27.04:05:26 (pvfw) inspect_recs BSR: rtypes [1] = filemark
2010/01/27.04:05:26 (pvfw) inspect_recs BSR: rtypes [2] = data
2010/01/27.04:05:26 (pvfw) inspect_recs BSR: rtypes [3] = filemark
2010/01/27.04:05:26 (pvfw) inspect_recs FSF
2010/01/27.04:05:26 (pvfw) inspect_recs ready to mount
2010/01/27.04:05:26 (pvfw) mounting at inspect_rec's request in rw_mode 2
2010/01/27.04:05:28 (pvfw) mounted ok
2010/01/27.04:05:28 (pvfw) at OB EOD, returning (2)
2010/01/27.04:05:28 (pvfw) pos_vol_cleanup not returning pstate
2010/01/27.04:05:28 (dmap) tape1 success
04:05:28 OBTR: obtar version 10.2.0.3.0 (linuxamd64) -- Wed Sep 24 11:12:44 PDT 2008
Copyright (c) 1992, 2007, Oracle. All rights reserved.
04:05:28 OBTR: obtar -c -Xjob:oracle/6142.1 -Xob:10.2 -Xstat -X shm:/usr/tmp/obsbt_10985_0_126458300010985a -Xbga:oracle/6142.1 -y /usr/tmp/[email protected] -J -F5 -f tape1 -Xrescookie:0x99ECC895 -H backup01 -zR
04:05:28 OBTR: running as root/root
04:05:28 OBTR: record storage set to internal memory
04:05:28 ATAL: reserved drive tape1, cookie 0x99ECC895
04:05:28 OBTR: obsd=1, is_job=1, is_priv=0, os=15
04:05:28 OBTR: rights established for user oracle, class admin
04:05:28 SUUI: user info oracle/oinstall, ??/??
04:05:28 STTY: background terminal I/O or is a tty
04:05:28 MAIN: interactive
04:05:28 SET: volume has no expiration time
04:05:28 CNPC: data host reports this butype_info:
04:05:28 CNPC: tar (attr 0x2C78: B_DIRECT, R_DIRECT, B_INCR, R_INCR, B_FH_DIR)
04:05:28 CNPC: DIRECT = y
04:05:28 CNPC: HISTORY = y
04:05:28 CNPC: LEVEL = 0
04:05:29 DOLM: nop (for tape1 (raw device "/dev/sg3"))
04:05:29 DOLM: ok
04:05:30 RLE: connecting to volume/archive database host
04:05:30 RLE: device tape1 (raw device "/dev/sg3")
04:05:30 RLE: mount_info is valid
04:05:30 A_O: tape device is local
04:05:30 A_O: Devname: HP,Ultrium 3-SCSI,G63Z
04:05:30 Info version: 11
04:05:30 WS version: 10.2
04:05:30 Driver version: 10.2
04:05:30 Max DMA: 2097152
04:05:30 Blocksize in use: 65536
04:05:30 Query frequency: 134217728
04:05:30 Rewind on close: false
04:05:30 Can compress: true
04:05:30 Compression enabled: true
04:05:30 8200 media: false
04:05:30 Error threshold: 8%
04:05:30 Remaining tape: 403359744
04:05:30 A_GB: ar_block at 0x2B544951A000, size=2097152
04:05:30 A_GB: ar_block_enc at 0x2B544971E000, size=2097152
04:05:30 ADMS: reset library tape selection state
04:05:30 ADMS: reset complete
04:05:30 VLBR: not at bot: 0x9
04:05:30 VLBR: tag on label just read: "000021L3"
04:05:30 VLBR: master tag now "000021L3"
04:05:30 RLE: set kb remaining to 403359744
04:05:30 RLE: noticed nil label
04:05:30 ARVI: resetting volume id from nil to PAS-RMAN-018935
04:05:30 PF: here's the label at the current position:
Volume label:
Volume tag: 000021L3
Intro time: Tue Jun 02 17:00:51 2009
Volume UUID: d0e25812-ed54-102c-a34d-001143fd735c
Volume ID: PAS-RMAN-018935
Volume sequence: 1
Volume set owner: root
Volume set created: Tue Jan 26 23:32:25 2010
Media family: PAS-RMAN
Volume set expires: never; content manages reuse
Original UUID: d0e25812-ed54-102c-a34d-001143fd735c
Archive label:
File number: 5
File section: 1
Owner: root
Client host: merge01
Backup level: 0
S/w compression: no
Archive created: Wed Jan 27 00:08:56 2010
Marker: End of data
04:05:30 PF: at desired location
04:05:30 RCVW: volume "PAS-RMAN-018935" / vuuid d0e25812-ed54-102c-a34d-001143fd735c reserved for writing
04:05:30 CREA: tape position after open_archive() is 0001A1800000
04:05:30 GLMT: returning "000021L3", code = 0x0
04:05:30 IMF: inherited media family PAS-RMAN is content-managed
04:05:30 CREA: setting history tag to "000021L3" from volume label
04:05:30 RLE: overwrite invalid/blank/marker section
04:05:30 VLBW: on entry, l->tag = "", master tag = "000021L3", bot = 0
04:05:30 VLBW: setting voltag from "" to "000021L3"
04:05:30 VLBW: volume is content-managed
04:05:30 RLE: write volume PAS-RMAN-018935, file 5, section 1, vltime 1264566745, vowner root, voltag 000021L3
04:05:30 VSLW: set last write time for volume oid 20949
04:05:31 ULVI: set mh db volume id "PAS-RMAN-018935" (retid "000021L3"), volume oid 20949, code 0
04:05:31 ULTG: set mh db tag "000021L3" (retid "PAS-RMAN-018935"), volume oid 20949, code 0
04:05:31 RLE: set kb remaining to "invalid or unknown"
Volume label:
Volume tag: 000021L3
Intro time: Tue Jun 02 17:00:51 2009
Volume UUID: d0e25812-ed54-102c-a34d-001143fd735c
Volume ID: PAS-RMAN-018935
Volume sequence: 1
Volume set owner: root
Volume set created: Tue Jan 26 23:32:25 2010
Media family: PAS-RMAN
Volume set expires: never; content manages reuse
Original UUID: d0e25812-ed54-102c-a34d-001143fd735c
Archive label:
File number: 5
File section: 1
Owner: root
Client host: backup01
Backup level: 0
S/w compression: no
Archive created: Wed Jan 27 04:05:28 2010
Archive owner UUID: 9d92d00e-0368-102b-89f6-001143fd735c
Owner class UUID: edde6dc8-f857-102a-a357-001143fd735c
Backup piece name: 8sl4ft06_1_1
Backup db name: emrep
Backup db id: 3844670930
Backup copy number: not applicable
Backup content: archivelog
04:05:31 RCVW: volume "PAS-RMAN-018935" / vuuid d0e25812-ed54-102c-a34d-001143fd735c reserved for writing
04:05:31 ADMS: reset library tape selection state
04:05:31 ADMS: reset complete
04:05:31 SNP: using NDMP protocol version 4
04:05:36 FLDB: drive buffer flush to medium took 0:05 (min:sec)
04:05:36 BNPC: volume position "0001A181" added to s_vol_start_pos
04:05:36 BNPC: initial volume label "PAS-RMAN-018935" added to s_vids, s_last_section 1
04:05:36 BNPC: initial volume tag "000021L3" added to s_vtags, s_last_section 1
04:05:36 BNPC: environment variable DATA_BLOCK_SIZE = 64
04:05:36 BNPC: environment variable DATA_ARCH_UUID = f3ccd49e-ed7a-102c-be2b-001143fd735c
04:05:36 MGS: ms.record_size 65536, ms.record_num 0x0, ms.bytes_moved 0x0
04:05:36 SMWB: setting mover window for possible checkpoint during backup
04:05:36 MLIS: mover listen ok for local connection
04:05:36 APNI: a preferred network interface does not apply to this connection
04:05:36 DPNI: a local NDMP data connection is in use
04:05:36 BNPC: directing data service to connect to mover
04:05:42 BNPC: issuing NDMP_DATA_START_BACKUP
04:05:47 BNPC: started OSB NDMP backup of backup01 to tape1
04:16:51 MNPO: data service halted with reason=successful
04:16:51 SNPD: Data Service reported bytes processed 0x6DF20000
Opening device /dev/sg3 failed - access denied to /dev/sg* device file (OB scsi device driver)

Permissions problem on the drive for the user running the job.

Access PowerView on iPhone,iPad and Android devices

Hi,
Can i access PowerView reports on iPhone,Ipad and an android device.
If yes what should be the Minimum requirements in terms of SQL Server and Sharepoint versions.
Thanks,
Gautam

Hi Gautam,
From the document
Planning for Reporting Services and Power View Browser Support, we can see that the Power View reports can be browsed through Apple Safari installed on Mac OS X 10.6 – 10.7 that only applies to Mac PCs. It seems that the browsers on iPad/iPhone (iOS 6)
devices and Android mobile devices does not support Power View reports currently.
Besides, from the document
View Reporting Services Reports on Microsoft Surface Devices and Apple iOS Devices, it also implies that Microsoft Surface Devices and Apple iOS Devices only support RDL reports browsing at this moment.
The browser support for Power View reports on mobile devices may be released in the future. Your understanding is appreciated.
Regards,
Mike Yin
If you have any feedback on our support, please click
here
Mike Yin
TechNet Community Support

Access for HLS protection on Android device

Hello there.
We are surveying Adobe Access 4.0 for protecting HLS live stream to iOS/Android(Jellybean) devices.
Here are questions arised while reading Adobe Access 4.0 Document (http://help.adobe.com/en_US/adobemediaserver/devguide/WS5262178513756206-4b6aabd1378392bb5 9-7fe8.html)
1. How many sites/services are using Adobe Access for their DRM solution, especially for their "LIVE" streaming service?
I am not sure whether Adobe Access is quite popular in DRM domain.
2. There are 3 types of protecting HLS live stream (Vanilla/PHLS/AccessV4).
For AccessV4 protected live stream to be played back on iOS devices, Adobe Access provides iOS SDK for building native player App. Then, what do we need for AccessV4 protected live stream being played back on Android devices?
Vanilla mode seems like HLS standard encryption method and we don't have to do any extra work for player side. But, PHLS and AccessV4 mode seems like Adobe proprietary features and requiring extra work to be played back on iOS/Android devices.
Am I correct?
3. If you know the real site which accept Adobe Access for their DRM solution, let me know it.
Thanks in advance.

hello，
the HLS is for Apple devices ， IOS， Mac。

I no longer can access my old desktop at all, is there a way to get the bookmarks from just the Sync account or an Android device to a new machine?

My desktop that I use for my primary device's hard disk died recently and my laptop shortly after got hit with a virus. This has left me unable to get to any of my bookmarks that were stored on my Sync account.
However, my cell phone still has all the old desktop links. Is there a way to get Sync to get those from the cloud onto the deskop, or do I have to start a slow process of sending links from my phone to my PC one at a time?
Thank you for your help on this.

Hi!
You will need to get your Sync Key from your Android Device and then follow this simple steps:
https://support.mozilla.com/en-US/kb/How%20to%20sync%20Firefox%20settings%20between%20computers#w_what-if-im-not-near-my-first-computer
In order to get your Sync Key from your Android Device you will need this add-on:
https://addons.mozilla.org/en-US/mobile/addon/aboutsynckey/
This should work. Let me know if you need further help.

I have both Apple and Android devices. My Android devices will not stay connected to wireless . I have the Airport Express. The Android devices are a Galaxy S4 and Tab 3. These both worked perfectly on my ancient Linksys WRT 120 N wireless router.

I have called Apple support twice and no one can confrm or deny as to whether Android devices can connect with the Airport Express. I have had the it configured 3 times so far and my Galaxy S4 and Galaxy Tab 3 7.0 are useless with the Airport Express.

BTW what did you mean by using my old wireless router as a AP?
Every Wireless router ever made is actually made of two components..
A router and a wireless AP. (AP = Access Point).
To use any wireless router as a AP you simply bypass or turn off the router..
In an Apple router this is called Bridge mode..
In many routers it is known as AP or WAP mode.
But often they do not have the option..
Set it up manually.. we call this WAN bypass as it will bypass the router.
So what you do is open your wireless router setup page in your browser.. go to the LAN setup page.
You need to do two things.
1. Turn off the dhcp server.
2. Set the LAN IP to match the main router..
For instance if your plug it into your apple router and it is at the default IP.. 10.0.1.1 then set the Linksys to 10.0.1.254
The Linksys is then updated.. Plug the ethernet cable from LAN port apple router to LAN port WRT120 (not WAN)
Now with a computer plugged into the apple router or into the Linksys .. by ethernet.. open the IP address you just set.. go to the wireless tab in the setup and give the wireless SSID a suitable name for your other (non-apple) products.. voila.. you have now turned a wireless router into an AP.

ISE Not Profiling Non-Domain Devices

I am having an issue where ISE is not profiling devices that do not belong to our domain. Machines with computer accounts in our domain get profiled with no issue. It does not matter if it is an apple device, windows device, or android device. The user can successfully get a prompt for their username and password, however they will get an error stating 'Incorrect Username or Password'. If I drill into the failed attempt, they get a 15039 Authorization Failed and it assigns DenyAccess to them. If I find the device by MAC address in the profiled endpoints, it remains UNKNOWN. If I manually assign a profile, then it lets the device on and successfully identifies the user. I need to be able to allow users to use their devices to gain access to the network.
SYSTEM INFO
ISE Ver: 1.1.4.218
Stand Alone Mode
Profiling Setup
DHCP - Interface ALL - Port 67
HTTP - Interface All
Radius
DNS - Timeout 2
Authorization Policies
Wireless Blacklist Default - if Blacklist and Wireless_802.1X then Blackhole_Wireless_Access
Profiled Cisco IP Phones - if Cisco-IP-Phone then Cisco_IP_Phones
OnlyMachineAuth if AD1:ExternalGroups EQUALS EDUORG/Users/Domain Computers then PermitAccess
Guest if WLC_Web_Authentication then Guest_Profile
Employee if (Apple-iPad OR Workstation OR Android) AND (Wireless_802.1X AND AD1:ExternalGroups EQUALS EDUORG/User Accounts/All Employees AND AD1:ExternalGroups NOT_EQUALS EDUORG/Students/All Students ) then Employee_Profile
Student if (Apple-iPad OR Workstation OR Android) AND (Wireless_802.1X AND AD1:ExternalGroups EQUALS EDUORG/Students/All Students AND AD1:ExternalGroups NOT_EQUALS EDUORG/User Accounts/All Employees ) then Student_Profile
Default if no matches, then DenyAccess
Any help would be greatly appreciated
Thanks,
Kevin

Sorry for not explaining further. The guest network works flawlessly. Employees and students are the ones having the issues. They connect to the employee and student networks. The guest network is soley for guests. Employees and students still connect to their respective networks.
Employees, for example would connect to the 'employees' network. They are unable to connect with their personal device. With their district issued laptop they can get on with no issue. Their district issued laptop is a windows machine which is joined to the domain. However, if a district employee decides to bring their ipad, they will still connect to the employees network. This is where they get the issue. It will not let them connect. It prompts them for their username and password, but then does not allow them on. The same applies to students.
I hope this clarifies it a little better
Sent from Cisco Technical Support Android App

Memory in Android devices

To use Android devices efficiently, users should be aware of the different types of device memory. This knowledge is important in order to understand, for example, where music, photos and videos are saved; how many apps can be downloaded from Google Play™; and how photos can be copied to a PC.
The below information is also of interest to developers who want to optimize their programs to make the best possible use of the resources in the device.
Generally, all Android devices share the same basic memory setup. What differs is how much memory is available to you via the different types of memory, and whether your device uses an external SD card or an internal memory chip.
Types of memory
The types of memory described and numbered below are consistent with the terminology used in Sony mobile device menus and in other content relating to 2013 Xperia™ devices:
1. Dynamic Memory (also known as RAM) is used by applications that run when the device is turned on. The amount of Dynamic Memory influences how many applications and operating system services can run at the same time. The Android operating system automatically closes applications and services that are not being used.
However, such automatic functionality has limits. For example, if a lower amount of free RAM is available to applications after a new release of the operating system (due to increased capabilities in the system), device speed will eventually be impacted. This is the main reason that a device cannot be indefinitely upgraded to newer releases of Android™.
If you experience problems with RAM, for example, if the device runs slower than usual or if the Home application restarts frequently when you leave an application, you should minimize the use of apps that run all the time. Such apps could include, for example, applications that frequently download social networking service updates. You could also consider using a static wallpaper instead of a live wallpaper.
To see which apps and services are currently active, go to Settings > Applications > Running services. You should have at least 50 MB, and ideally 100 MB or more, of free RAM to avoid slowdowns and application restarts.
You should also be aware that if you update the device to a later Android release, the load on the built-in Dynamic Memory will increase due to the addition of more features, as mentioned above. As a result, the device may run slower after an update.
2. System Memory (also known as “System partition” or “/system”) is used for the Android OS and for most applications that are pre-loaded from the factory. This type of memory is normally locked, and can only be changed through a firmware upgrade. There is usually some free space available in this section of memory. However, since it is locked, you cannot save apps, photos or any other content to this memory. System Memory is reserved for future firmware upgrades, which almost always need more memory than the original firmware. You cannot see or influence the use of this memory.
3. Internal Storage is memory used as” working” memory. It can be compared to the C: drive on a PC or to the startup disk on a Mac.
This type of memory is used to store all application downloaded from the Google Play™ Store (and other sources) as well as their settings and data (such as emails, messages and calendar events, for example). All applications have an allocated area which no other applications can access and where
the application data can be stored.
Some game applications also store content such as game music and game level information outside their own designated area. In most cases, an application can choose to save its data in a location of its own choosing (outside the protected application settings area). Generally, such content is not deleted when an application is uninstalled; it must be removed manually by connecting the device to a computer with a USB cable, or by using a file manager application.
Internal Storage is also used for all user content added, for example, as a result of the user taking photos with the camera, downloading media files, and performing file transfers. Typical user content includes:
• photos
• movies
• music
• downloaded documents (as email attachments, for example)
Internal Storage will tend to fill up as a result of normal usage. Examples of such usage are the saving of data by applications; the downloading and installation of new applications; the downloading of free or paid content; and the shooting of pictures and movies. Therefore, the larger this memory is from the start, the more applications you can download and use, and the more pictures and movies you can shoot.
If the Internal Storage starts to get full, the device slows down, and in some cases it might no longer be possible to install more apps. You should always ensure that you have at least 100 MB of free Internal Storage. If not, you should consider removing some apps that you seldom use, or move content that you do not frequently access to safe storage.
You can see approximately how much Internal Storage is free in Settings > Storage >Internal Storage. You can also view more detail about how much memory is used by applications in Settings > Applications.
Please note that in Sony Mobile 2013 products, “Internal Storage” is now the combination of what was previously known as “Device Memory” or “Phone Memory” (for applications and their data – also previously known as “/data”) and “Internal Storage” (for user’s content – also previously known as “/ sdcard”). The reason for this change is to make the use of available memory more flexible, and also to enable the optional encryption of user’s content.
Memory card slot
In some products you may find both a large internal memory and a memory card reader slot. However, on the current Android platform, the card reader slot does not work in the same manner in a device with a large internal memory as it does in a device with ONLY a memory card slot.
Generally, since most applications expect only a single location for storage, such applications will not generally allow you to SAVE anything to the memory card (i.e., they do not offer the option to choose a storage location). However, some applications (for instance, the Sony Mobile “Camera” application) may actually allow you to do so. Other applications, for example, backup applications such as the Sony Mobile “Memory” application, will by definition be configured to copy content from the Internal Storage to the external SD card.
On the other hand, when it comes to reading from an external SD Card, you will be able to access content (for example, videos, photos and music) on a memory card inserted in this slot without any special consideration since the Android system searches all available memory for content. Therefore, such products may be regarded as supporting a fourth type of memory, called “External Card” or “SD Card”.
4. SD Card (known as “/ext_card” from a programmer’s point of view, or by other names in other Android products) is the name for the removable SD memory card in all 2013 Sony Mobile products. As described above, this External Card memory is generally more limited in that any application can read from it, but many applications cannot save to this card. Only a few applications, including backup applications and file manger applications, have the capability to save to this card.
Backing up data to different memory types
Generally, you should not save photos, videos and other personal content solely on the internal memory of a device. If something should happen with the hardware, or if the device is lost or stolen, the data stored on the device’s internal memory is gone forever.
In a device where an SD card reader is the main memory, it is relatively easy to take the card out and copy all content to a PC or Mac, or to an entertainment device with a memory card slot. In a product featuring Internal Storage as the main memory, it is not possible to physically remove the memory. Instead, any critical or high-value content must either be copied to an external SD card by a special backup application, transferred to remote storage over a network (mobile or Wi-Fi), or to a computer via a USB cable.
To facilitate the transfer of data via a cable, the Xperia™ phone supports the Microsoft standard, Media Transfer Protocol (MTP), which makes it possible to easily transfer content back and forth between your device and a Windows PC. For Apple Mac computers, a special application called Sony Bridge for Mac is available with built-in support for MTP. This application can be downloaded from the
Support page.
Note that you do not need to back up or make a copy of applications that you have downloaded from the Google Play™ Store. They can normally be downloaded again after you have set up your Google account to work in a new device (or in a device where the memory has been completely erased).
Note 1:
As noted above, some Android devices, including Sony Mobile devices from 2012 and Sony Ericsson devices from 2011 and earlier, do not use a single “Internal Storage” for both applications (and their data) and user content. Instead, these devices use either an external SD card for user content, or a corresponding area of internal memory to reproduce the functionality of an SD card. In such devices, there is a fixed limit between the application area (“/data”) and the user content area (“/sdcard”), with the result that user content can build up and reach this limit. The consequence of such a limit being reached, for example, for the camera application, would be that no new pictures could be taken even if there was still a considerable amount of free space in the application area (or in the user content area). In such an instance, the download and installation of new applications would also not be possible, even if there was enough free memory in the content area.
Note 2:
Some devices with integrated storage have abandoned the distinction between the application area and the content area when it comes to a Factory Data Reset. As a result, there is no option in such devices to perform a Factory Data Reset and preserve content. In such devices, all content is mandatorily and completely deleted from the device when a reset is performed.
In contrast, Sony Mobile’s memory integration solution makes it possible to preserve user content in this situation. Therefore, when performing a Factory Data Reset, the default action will still be to only remove applications and their data, and an option box must be checked if all content is to be removed as well (as might be desirable when selling the device second-hand, for instance).
Note 3:
For a developer, it is important to note that from a programming point of view the location names used to refer to the different memory areas described in Note 1 are still valid, i.e., the area used for applications (“/data”) is still present, as is the area used for content (“/sdcard”).
In reality, “sdcard” is a so-called “symbolic link” to “/data/media”. However, from inside an Android application, “/sdcard” can still be used. For example, you can use “sdcard/DCIM/100Android” to find all camera images. The continued use of “/sdcard” to access the content area ensures compatibility across different products and Android releases in this regard.
- Community Manager Sony Xperia Support Forum
If you're new to our forums make sure that you have read our Discussion guidelines.
If you want to get in touch with the local support team for your country please visit our contact page.

Are you perhaps zipping the custom storefront incorrectly? Make sure when you zip up the files that you have them all loose at the top level of the zip file. They can't be inside a folder in the zip file.
The custom store from DPS Configurator, if you upload it to App Builder directly without unzipping it, should work without error.
Where are you seeing lacking documentation for Android? Bob spent a great deal of time documenting the new Android viewer, and all of our SDK documentation for custom storefront also has complete details about which APIs are supported on the platform.
Neil

Setting Up Google Chrome Features for Cloud Printing from an Android Device

These steps are organized for optimal setup procedure and to decrease the time it would take to set this option up from start to finish. This is a lengthy process and is more for possibly troubleshooting issues that may arise during the setup of Google Chrome's Cloud Print feature. However, if you have an Android phone or tablet and are interested in being able to print virtually anything at anytime from anywhere from your phone to any brand of printer regardless of setup, there is a way. And this is how:
Open/Install Google Chrome onto a computer
Sign in with personal email to access the same Google Chrome account you intent to print from
Download Google Drive as an external storage you can access from anywhere
Open Google Chrome Settings (three lines stacked on top of each other)
Scroll down to the bottom of settings and click "Advanced Settings"
"Sign in/add printers/manage printers" are three of the print options you may see here
Follow this link for information on:
adding a classic printer to this option: https://support.google.com/cloudprint/answer/1686197?rd=1
how to add an HP ePrint email: https://www.google.com/cloudprint/learn/printers.html#info-hp
on registering the email of that printer (HP registration page): https://www.google.com/cloudprint/learn/setup-hp.html
8. add the printer to this section of Google Chrome
9. at the bottom of the page you will see "Send a test page/print test page" (that will be useful later)
10. at the top of this page is the option to share this printer with other Google Chrome users
11. Open Google Drive from www.google.com (likely displayed at the top of the webpage)
Can create a new document of any file type, upload, draw, etc
Leave computer on if intending to print from off the network or another location
The next steps are in regards to printing from a mobile device:
Install/open Cloud Print App
Add personal email account associated with Google Chrome
Select printer management if on the same network as the printer
Select Web tab and Google Drive if not on the same home network
Find earlier test page in Google Drive Documents
To locate other documents one could find many applications within this app or
In another app like Documents To Go, you can select to send previously saved documents (like one might send an email on the Android) to the Cloud Print app to open, view, and print
Print Test Document – this function means the printer has officially been added now
In Google Drive, but within the Cloud Print app, you can select the printer that was added to this network or from "Printer Management Options."
There are many ways to determine if your printer is still connected (offline, ready, etc.) but after confirmation that the printer is available, print jobs rest in the print queue until the printer receives the command to print. Then the documents are stored and available for reprinting.
Converts most print jobs to .pdf but prints most file formats from other applications as well
In Printer Management advanced settings
You can add a contact from the phone to use this printer
Set as default
See an extensive page of setup and printing options
*After a test print while the computer was off the document did not print and the printer appeared offline until approx. 4 min after computer was rebooted, then the document printed automatically.
Also if a document does not print, the troubleshooting guide on the phone suggested logging out of Google Chrome Cloud Print but I was unable to find that option it was suggesting (unable to log out)
To completely finish adding any additional Google Chrome accounts that wish to share this printer using the suggestion in step 10, you must log into the email that was added and select ADD PRINTER from within the email that was sent for the confirmation and follow the link and instructions on how to do this from your email.
Google Chrome and Google Drive support Windows, MAC, and Linux
You can also change share options, privacy settings, etc. but if you choose to go with the two-step verification process, you may not be able to add your Google Chrome email account to the app without a 16 digit code generated within Google Chrome Privacy Settings for your app (not recommended)
Now you have the option to also email any document to either the Cloud Print App or HP ePrint from the phone/tablet without actually accessing the app first. Locate the document, press the menu button for more options, select "Send to" and a list of available apps will appear. Choosing Cloud Print or HP ePrint sends the document or photo directly to the "print" function within the apps, instead of opening the app first and then searching for what it is you want to print.
**computer connected to printer must be on**
Requirements: a) Google Chrome, Google Drive, and Cloud Print mobile app b) These steps outline the use of an Android device on the network for setup c) will need the computer connected to the printer to be on at all times d) go to this webpage http://www.google.com/cloudprint/learn/ if you have any more questions.
Available features of Cloud Print App
a. Print all file formats from Google Drive (uploaded or create)
b. Has an internal notepad and drawing tool
c. Prints off all contacts and phone numbers as well as specified text messages
d. The scan option actually just means take a picture
e. Without Cloud Print Pro you get 5 days to test the features of printing Facebook pictures, Drop Box and Schedules before those features are no longer available
Don't forgot to say thanks by giving "Kudos" if I helped solve your problem.
When a solution is found please mark the post that solves your issue.
Every problem has a solution!
This question was solved.
View Solution.

This document is to assist others in understanding and troubleshooting Cloud Print. This took me many hours to get setup, troubleshoot, and prepare a document that is simple and easy to understand. These are literally step-by-step instructions on how you could be able to print from any Android device to any printer connected to a computer that has Google Chrome. You would then be able to use the Cloud Print App without having to use HP ePrint to print to any printer connected to any computer (USB or wireless) basically allowing you to print virtually anything from your Android.
Don't forgot to say thanks by giving "Kudos" if I helped solve your problem.
When a solution is found please mark the post that solves your issue.
Every problem has a solution!

Using HH2 as WAP with Infinity and Android devices

We have just had Infinity installed.
Before Infinity I had two HH2s set up as waireless access points using the guide prodiced by Keith of this neighbourhood. They conected back to the HH3 via two TP-Link powerlink units. It all worked well. I never got round to resetting the SSID to the same on all 3 hubs which meant as you moved from one side of the house to the other you have to choose a different router.
BT set up Infinity today and it was working fine with my original setup however on the spur of the moment I decided I would change the SSID for all three hubs (two original HH2s and the new HH5).
I started with HH5 and it worked fine. I then worked my way around the other two HH2s and it seemed to work for a while and then suddenly when I was in the same room as the HH5 my Android tablet could not get the internet. Logging into the IP address for the HH5 it showed that it was connected. The blue linelight was on. The internet radio in the cooking room was connected and working, presumably connected to the nearest HH2.
I reset the wireless settings on the HH5 but still my tablet and my Android phone got the error page saying that there was no internet connection. After diconnecting a couple of times I eventually got the Android tablet connecting to both the HH5 and to the common SSID now shared by the HH2s. My phone wont connect at all.
As a test I then connected my work laptop via a cable connection to a TP-Link and it worked fine. I then connected it via the commn SSID (HH2 only) and the HH3 SSID and agin it works fine. This thread is created on WiFi to the common SSID.
Sorry for the long description.
Two questions:
1. When setting the common SSID I used the same passkey for all three routers, was this the best way to do it?
2. Why has my Android phone lost connectivity and how do I recover it?
PS 3rd question, why wont this forum accept the word "kit c hen"?
PPS I've just checked on the settings within HH5 and the phone is showing as connected but to the 2.4GHz signal.

There are a couple of different guides on my website, one of them is by Jarviser, so I don`t know which one you are using.
If you make all the SSIDs the same, then Android devices tend to get confused, as they see the same SSID, but with a different BSSID (Wireless MAC address).
This can cause them to fail to get a valid IP address, so you get no connectivity, this is a common issue with BT Wifi hotspots as well, when Android devices are used.
It would be better to use slightly different SSIDS, and then allow the devices to automatically select the one that is in range.
Make sure that the HH2s are on different channels, and make sure that smart wireless, and smart setup is disabled on the HH5.
To answer your last question, its part of the spam protection that was implemented on this forum a while back.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Consuming ABAP Webservice from Android device

Dear Experts,
I am ABAP developer (limited knowledge on android) trying to connect Android device to a.SAP Webservice
Through trial and error and help from SDN and Android forums i managed to link up the ABAP webservice and android using KSOAP2 API.Its working perfectly now but only when i save the username password for SAP access in the webservice settings in transaction SICF.I need to access the service by passing the username and password values through the SOAP request header but so far my efforts have failed me.im presently using the following code to pass my auth values.
I would be grateful if you can point me in the proper direction.
       String NAMESPACE = "mynamespace (works properly without auth)";
        String METHOD_NAME = "mymethod (works properly without auth)";
        String SOAP_ACTION = "mynamespace/mymethod (works properly without auth)";
        String URL = "myURL{works properly without auth)";
        SoapObject Request = new SoapObject(NAMESPACE, METHOD_NAME);
        Request.addProperty("Purchaseorder","4500001168");
        Request.addProperty("Username", "myusername");
        Request.addProperty("Password", "mypassword");
       SoapSerializationEnvelope envelope = new SoapSerializationEnvelope(SoapEnvelope.VER11);
       envelope.setOutputSoapObject(Request);
       HttpTransportSE androidHttpTransport = new HttpTransportSE(URL);
try
           androidHttpTransport.call(SOAP_ACTION, envelope);
           SoapObject response = (SoapObject)envelope.bodyIn;
           String testValue = response.getProperty("PoHeader").toString();
           AlertDialog alertDialog = new AlertDialog.Builder(this).create();
           alertDialog.setMessage(testValue);
           alertDialog.show();
       catch(Exception e)
            e.printStackTrace();
Thanx & Best Regards

Hi,
you can develop a custom Transport class wich extends the: HttpTransportSE class by authentication features.
example:
public class AuthTransportSE extends HttpTransportSE{
     private String username;
     private String password;
     public AuthTransportSE(String url, String username, String password) {
          super(url);
          this.username = username;
          this.password = password;
     protected ServiceConnection getServiceConnection() throws IOException {
          ServiceConnection midpConnection = new ServiceConnectionSE(url);
          addBasicAuthentication(midpConnection);
          return midpConnection;
     protected void addBasicAuthentication(ServiceConnection midpConnection) throws IOException {
        if (username != null && password != null) {
            StringBuffer buf = new StringBuffer(username);
            buf.append(':').append(password);
            byte[] raw = buf.toString().getBytes();
            buf.setLength(0);
            buf.append("Basic ");
            org.kobjects.base64.Base64.encode(raw, 0, raw.length, buf);
            midpConnection.setRequestProperty("Authorization", buf.toString());
Afterwards you can initialize the Webservice with:
AuthTransportSE androidHttpTransport = new AuthTransportSE(URL, userName, pasword);
Cheers,
Dennis.

There,are,restrictions,to,opening,PDF,files,on,an,Pad,or,Android,Device,that,will,open,in, Microsoft,Internet,Explorer,desktop,or,laptop.,If,I,bought,a,Windows,8.1,tablet,and,had,Ad obe,reader,installed,would,I,then,be,able,to,open,the,secure,document,wit

There,are,restrictions,to,opening,PDF,files,on,an,iPad,or,Android,Device,that,will,open,in ,Microsoft,Internet,Explorer,desktop,or,laptop.,If,I,bought,a,Windows,8.1,tablet,and,had,A dobe,reader,installed,would,I,then,be,able,to,open,the,secure,document,with,Internet,Explo rer?

What's,with,the,commas?
If you have a tablet that runs full Windows 8 - not Windows 8 RT, which is limited.
And if you install the full Adobe Reader for Windows, not the special Adobe Reader Touch for Windows 8.
Then you will have the same features as a desktop.
Unless they can't be accessed in touch mode, since it isn't a touch app.

Cisco ISE 1.2 - Problem with Device Onboarding of internal users using AD Credentials

Dear experts,
We have implemented ISE 1.2 with WLC 7.5 in our organization. We are using Device Onboarding by letting the users enter their AD Username and Passowrd on Guest portal which then redirects them to device registration portal where they simply register their device and they get internet access.
The problem is that some users are unable to authenticate using this portal while some can successfully authenticate and register their devices. All users are of the same group in AD. Also, we have enabled this check on two places. One is when users connects to the SSID where the security WPA2-Enterprise uses 802.1x and asks for AD username password. The other is on the portal.
All users are able to connect to the SSID using their AD credentials. However, 30% of the users are not being authenticated when they are redirected to the Guest portal for device registration. Also, it gives no error or event on either ISE or on the mobille device. When the users enters their credentials, the same guest portal page comes back blank with no errors or logs anywhere.
Can someone guide me if there is some configuration mistake that I may have done or have someone faced this same issue and were/weren't able to resolve it.
Thanks in advance.
Jay

Our problem got solved. It was related to a few user accounts in AD. Usually any authentication on AD User Account is carried out using the User ID. However, during Web Authentication, Login ID/Name is also checked by ISE and should be same as User ID.
The problem you are facing might also related be to AD since we had the similar issue. try to check this on a laptop as the mobile portal gives no error if the user is unknown or invalid. Also, you can enable logs for web authentication which are off by default. It will give you a pretty good idea where the problem lies. And yeah, do not keep the web authentications log on for long, it can hang your ISE.
Anyways, thanks for all the support.

ISE deny access to Android devices

Similar Messages

Maybe you are looking for