Learnins ESA

Hi all,
I am an abap consultant and want to learn ESA or SOA. Please suggest me some good startover links where I can start studying ESA online.
PS: I really need this urgently
Thanks
Ribhu

Hi Ribhu,
Check the link ->
<a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sapportals.km.docs/library/esa/esa%20-%20an%20introduction.pdf">ESA</a>
Hope this helps.
Regards,
Gajendra.

Similar Messages

Cisco Email Security Appliance (ESA) - Reporting

In previous versions on ESA you could export data and reports in CSV formats using an API. Is that still available?
>From the following document :
IRONPORT ASYNCOS 6.4 REPORTING API FOR IRONPORT APPLIANCES
REPORTING API OVERVIEW
The Reporting API feature allows you to download the same data collected by the Email Security Monitor component of the IronPort Email Security appliance or Security Management appliance in a comma separated value (CSV) format. This format allows users to integrate the IronPort appliance's data gathering capabilities into other IT and business reporting systems.
DOWNLOADING REPORTING DATA
You can retrieve the data used to build the charts and graphs in the Email Security Monitor feature via HTTP. This is useful if you plan to perform further analysis on the data via other tools. The data is available in standard comma separated value (CSV) format. The easiest way to get the HTTP query you will need is to configure one of the Email Security Monitor pages to display the type of data you want. You can then simply click the Export... link to initiate the download process.

It went away, there's a new one (RESTful) in 9.0/9.1
http://www.cisco.com/c/dam/en/us/td/docs/security/esa/esa9-0/ESA_API_1-0_Getting_Started_Guide.pdf

How do i change the $Date variable format on an Ironport ESA to be DD/MM/YYYY

I have an Ironport ESA running ASyncOS 7.6 and i use the $Date variable in notification emails. It is currently formatted in the US way of MM/DD/YYYY but we need it to be formatted as DD/MM/YYYY. Is there any way to do this? The time zone is correct but i can't find anywhere to modify system variables.

There doesn't appear to be any way to change the formatting of that variable. Perhaps you can make use of $Timestamp or $GMTimeStamp instead?

Is it possible to perform a "Clean Install" of AsyncOS on my c100 ESA?

after decommissioning this c100, both Hard Disk Drives (HDDs) were removed, reformatted, and reinstalled in the ESA by the IT Group.
Is there a method to reload the AsyncOS on this appliance? Or do I now have a clean "brick"?
Please help.
Regards

Hello Gordon,
I'm sorry but AsyncOS is not available on CD/DVD for a fresh install. All appliances are delivered with AsyncOS on it and they can upgrade either via our downloads server or using a local upgrade server. For the local upgrade server procedure (when internet connectivity for the appliance is not available for security reasons), you can download the AsyncOS upgrade package from an URL. But this requires that you have a) already an AsyncOS release on your appliance and b) a valid support contract is in place for the appliance serial number. So in your case the local upgrade server option would also not work as this requires that the appliance can run the 'upgrade' command.
So sad to say but without an replacement of the entire appliance via the sales team (as it is not a product malfunction support cannot help here) there is no way to get the C100 back online with an AsyncOS. But of course installing Windows OS or Linux (I can confirm that Debian is running on the hardware) would be a good reusage of the C100 in a different way.
Thanks and regards,
Martin

Has anyone upgraded the Ironport ESA to 8.5.6-074 and had the issues of Raid status showing unknown?

Has anyone upgraded the Ironport ESA to 8.5.6-074 and had the issues of Raid status showing unknown? After we upgraded our appliances we are having issues with our ESA appliances showing the RAID status as unknown. When we reported the issue to CISCO we were updated there were no issues reported at all. Could anyone please confirm if you have experienced the same issue.

You should see OPTIMAL - meaning the drives in the C170 are in good health/status:
myc680.local> version
Current Version
===============
UDI: C680 V FCH1611V0B2
Name: C680
Product: Cisco IronPort C680 Messaging Gateway(tm) Appliance
Model: C680
Version: 8.5.6-074
Build Date: 2014-07-21
Install Date: 2014-07-29 11:16:34
Serial #: xxx-yyy1611Vzzz
BIOS: C240M3.1.4.5.2.STBU
RAID: 3.220.75-2196, 5.38.00_4.12.05.00_0x05180000
RAID Status: Optimal
RAID Type: 10
BMC: 1.05
There are times post-reboot, that you'll see and get notification of RAID sub-optimal --- meaning that the appliance is running through on a health-check of the appliance's RAID. You should be getting a notification once RAID status has returned to OPTIMAL, or as per the older OS revisions, READY:
myc170.local> version
Current Version
===============
UDI: C170 V01 FCH1428V06A
Name: C170
Description: Cisco IronPort C170
Product: Cisco IronPort C170 Messaging Gateway(tm) Appliance
Model: C170
Version: 7.6.3-019
Build Date: 2013-06-09
Install Date: 2014-09-12 13:52:24
Serial #: xxxxxxD87B39-yyyyyy8V06A
BIOS: 9B1C115A
RAID: 02
RAID Status: READY
RAID Type: 1
BMC: 2.01

XI in a ESA-scenario

Hello,
anyone can explain me when it is useful to use the XI in an ESA-Scenario?
Thanks for your help!

Thomas,
XI and ccBPM provide many infrastructure or utility services that move a Service from being simple point-to-point solution to a managed Enterprise Service. They provide a substantial layer of abstraction and mediation for implementations that help accomplish the goals of ESA. As Greg mentions, real world examples of ESA will gravitate toward these solutions because the capabilities are required.
So, if you want to do Enterprise Services without XI and ccBPM you need to implement these capabilities yourself. For instance, if you need monitoring and the ability to re-play a SOAP message that never made it to a Service Provider, you must create a queue, create tools to interact with the queue, and expose the queue Service to Service consumer as a proxy for the Service Provider. You must do this to a Enterprise scale because you want to re-use the construct for all Services. I do not mean to imply that any of the above steps are hard, they are just needed.
You could create a Monitor Service and a Logging Service that you force all other services to call as part of every consumer request. In a sense you would have a business interface to the consumer, but you would force all providers to also make monitor and logging service calls as part of their implementation. Depending on how you go about this, you could end up with tight coupling between Monitor Service Version 1.0 and Business Service implementations you deliver around the same time. When you evolve Monitor Service 1.0 to 2.0, you will be faced with potentially updating any Business Service that used 1.0.
If you want to compose Services from existing Services then you need to make sure you have a mechanism to mediate change in the underlying services such that changes to a part of the composite service does not break the entire composite service. Failure to put this mediating layer in between will result in either fragile composite services or an increase in complexity for service consumers (they will need to implement some mediating code, which will also likely be fairly fragile given that it is re-implemented by each consumer).
Finally, with respect to the Netweaver infrastructure (XI, WebAS, ccBPM, Enterprise Services Investory and Repository) SAP continues to invest in exposing SAP core capabilities as Enterprise Services through Netweaver. To expose SAP core only through simple services leaves functionality we give you now, and we are enhancing in the future out of the Enterprise Services Landscape.
To your point about "Central infrastructure to enable interaction..." Long term I do think that a central, single infrastructure is not likely to be the answer for all services at all levels of granularity. I just suggest that you err on the side of robust, managed services because when you expose a service your really never know how consumers are going to use it.
In a real world scenario for a customer we expose two services from BW, an Authorization check for BW data as a Service and a BW Data Service that leveraged the Authorization Service, that we immediately used in an composite application in WebAS. In that example, the EJB-based application calls a simple Web Service exposed from BW. We did not go through XI, we did not add any other mediating or monitoring service. That was the proper approach for that particular need, and the level of abstraction and insulation we needed was provided by the simple service infrastructure of BW and WebAS. Now when other teams learned of the neat Data Service from BW we exposed and want to use it, should we just send them the WSDL and the endpoint address? I would argue that you should at least put some mediating infrastructure in between because neither party (Consumer or Provider) knows very much about the other. Adding this mediating layer has no impact on the original consumer-provider relationship that sparked the creation of the service, it simply protects future consumers. As consumers from all over the enteprise begin to consume our service we may need to change, bar, or even charge-back for the use of our service, so we need more control. We provide our Data Service as an enterprise service endpoint and then use all the NW stack to insure robust, auditable, secure, and changeable Services. Again, do you have to use XI to accomplish this, no you do not, but I would. We use both XI and ccBPM as part of the Service landscape for the customer I am referring to.
I hope this helps.

ALE/IDOC and RFC/BAPI Integration Scenarios with SAP DS for ESA v3

Hi,
we are planning two PoCs of Integration Plattforms. One of our major requirement set is SAP Integration into our existing SOA.
Because we also have R/3 4.7 Systems in production, we are planning to test ALE/IDOC and RFC/BAPI Integration scenarios with these Integration Plattforms.
My question is:
We are looking for are smart solution to get a SAP Test Environment, where we can test ALE/IDOC und RFC/BAPI Integration scenarios.
It is possible to do this with SAP DS for ESA v3 or shall we better use IDES for that purpose?
Best regards,
Steven

Hi Abhishek,
This is our scenario. We are doing an integration of SAP HR r/3 system with the CRM system. We need housing information details of the employees which we have in custom infotype 9310 in SAP HR system and we need those details in the CRM system. So am planning out for an ALE/IDOC approach for the integration and gonna maintain the 9310 details in a custom table. In the CRM system, we gonna build a BOL layer for accessing the 9310 details. Also i'm preparing a HLD for this process. I wanna read and go through few same HLD's before i submit my proposal to my client. Please suggest me and help me out.
Thanks in advance.
Regards,
Arunmozhi.

"An application fault occurred" with AsyncOS 8.0.1 on multiple ESAs

Ever since upgrading to AsyncOS 8.0.1-023, we have been getting the following application fault intermittently but it has been triggering constantly this morning on all 4 appliances in a cluster and 2 others in a separate cluster:
An application fault occurred: ('egg/coro_ssl.py _non_blocking_retry|140', "<class 'sslip.Error'>", "(336195711, 'error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry')", '[egg/smtp_client.py run|885] [egg/smtp_client.py _run|964] [egg/coro_ssl.py close|238] [egg/coro_ssl.py shutdown|218] [egg/coro_ssl.py _non_blocking_retry|140]')
The only thread I see regarding this is that is an known bug with the OS version. Is there a way to temporarily correct this and is there a known cause to this such as a corrupt message? We do not want to keep receiving this alert until a fix is released and do not want to be forced to turn off the alerting.
https://supportforums.cisco.com/discussion/12071286/cscug73383-ironport-esa-version-801-023

The same for our 2 ESA C370, Version: 8.0.1-023 AND a similiar message for our M670 Version: 8.1.1-013. They were upgraded vom V 7.x last weekend.
Suprisingly we drive 2 ESA C360, 1 M670 and 1 M160 for another customer without this error. Tose machines were upgraded to the same 8.x versions mentioned above in December last year! Looks a bit strange to me ...
The Critical message is (on M670):
An application fault occurred: ('navigation/HelpBarYUI.py my_tasks_list_submenu|462', "<type 'exceptions.KeyError'>", "'varstore'", '[util/Aquarium.py screenLoop|408] [util/InternalLibrary.py inverseExtend|328] [util/InternalLibrary.py __call__|769] [layout/Bare.py __call__|578] [util/InternalLibrary.py __call__|769] [layout/CssAndJavaScript.py __call__|451] [util/InternalLibrary.py __call__|769] [layout/Sparse.py __call__|1483] [Cheetah/NameMapper.py valueFromSearchList|250] [Cheetah/NameMapper.py _valueForName|229] [layout/Sparse.py doTop|851] [Cheetah/NameMapper.py valueFromSearchList|250] [Cheetah/NameMapper.py _valueForName|229] [layout/Sparse.py doHelpBar|795] [util/InternalLibrary.py call|280] [navigation/HelpBar.py __call__|154] [Cheetah/NameMapper.py valueFromSearchList|250] [Cheetah/NameMapper.py _valueForName|229] [navigation/HelpBarYUI.py options_and_help_yui_menubar|217] [Cheetah/NameMapper.py valueFromSearchList|250] [Cheetah/NameMapper.py _valueForName|229] [navigation/HelpBarYUI.py my_tasks_mainmenu|275] [Cheetah/NameMapper.py valueFromSearchList|250] [Cheetah/NameMapper.py _valueForName|229] [navigation/HelpBarYUI.py my_tasks_list_submenu|462]')
Version: 8.1.1-013

Online Meet-up 6. How does RFID infrastructure figure as a part of ESA ?

ESA is a technology similar to RFID as a technology.
For Ex: If a company does not have an SAP system at this moment. We have to work with their legacy system. Then we need to use the ESA. With the ESA, it will be easier to work with any system.ESA is used to support to enable RFID solutions.
Reference : TechEd '05 Vienna
SAP RFID Technology
¢ George Yu, SAP

Thanks Srigandhini,
Others are also welcome to add their comments about RFID in an enterprise services architecture.
More info about ESA can be found <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/developerareas/esa">on the ESA homepage</a>.

IronPort ESA 170 Upgrade Failed

Hi All,
We have just got two IronPort ESA 170 appliances delivered.
I started off with upgrading the firmware from version 7.5.2-101 to 7.6.3-019. One of the appliances got upgraded fine. However, I am getting an error on the other one. Exactly when the upgrade reaches at 72% it throws the error " The following error occured during upgrade: Upgrade exited without success. Please attempt upgrade again after clearing the error". Attached is the screnshot.
I tried upgrade three times and got the same error all the time. Just wanted to know if anyone else has faced anything similar before raising a TAC. Is it because of disk space issue?
Please assist.
Thanks in advance.
Faiz

If you try to upgrade more than once and you keep getting the same error at the same time, then you could think about bandwidth control in the network or web traffic redirection.
A packet capture could help finding more info about what can be the case or you may want to go through TAC. With remote access to your appliance they can identify if the issue is with your appliance or not. And if it is not, they may be able to assist you identifying the cause.
Last but not least, you can try Local Upgrade. Please refer to the Technical Article below.
=============================================
Comprehensive Guide to Local Upgrade Servers
Knowledge Base Answer ID: 1558
http://tools.cisco.com/squish/212fd
I hope this helps. If that is the case, please mark the question as answered.
Regards,
-Valter

Mass configuration of standard ES Bundle ESA Add-On 603

Hi All:
We have recently installed and activated the ECC-SE ESA add-on 603 on our SAP ERP 7.0 SP14 with soamanager transaction. I have checked that the add-on, I believe, it is most likely well installed. At least, when I execute the SPROXY transaction and I search for the enterprise service definitions, I can found them all. (All the standard services included on the add-on).
I have activated on the SICF all the services included on the /default_host/sap/bc/srt/xip/sap/ route, and I have also activated the services for the SOA application manager, where I can successfully enter.
I have reviewed many documentation available on the SDN but I cannot find how to create a real mass configuration of the standard services included on the ES Bundle. I have reviewed the documentation available at http://help.sap.com/saphelp_nw70/helpdata/EN/47/3431de6c720aa7e10000000a114a6b/frameset.htm , and execute most of the steps included but the documentation is not very good.
I have entered on the SOAMANAGER transaction and access to the +Technical Configuration / Profile Management +, where I have created a default profile or at least after some attemps it has appeared. I have reviewed all the profile characteristics at seems the correct thing to do.
1.Create the DEFAULT_PROFILE.
Later I entered on the Mass Configuration, where you can create a configuration scenario, selecting all the service you want to configure. Here I created a test scenario where I selected some test services such as detailed_flight_info_get, businesspartner.. and so on. Later you save it and you active the configuration scenario.
I had to assign each one of them to the profile I previously created in order to configured them. My question:
Is there is a way to skip or to automate this step or I have to manually assign all the 600 services included on the ES Bundle to the default profile in order to "mass configure" them.

Hi all:
I have entered on the ES Workplace site and see how configurations are for SOA MANAGER there, I have opened a standard service similar to the one I am trying to configure and I see that it has no services or endpoint either.
Object Status: Services: 0 / Endpoints: 0
Porttype Namespace: http://sap.com/xi/EA-APPL/SE/Global
Porttype Name: MaintenanceOrderCreateRequestConfirmation_In
Internal Name: ECC_MAINTENANCEORDERCRTRC
SOAP Applikation: URN:SAP-COM:SOAP:XMS:APPLICATION:XIP
Package Name: PLM-SE_EAM_XI_PROXY
So I am a little bit disoriented, I have seem that if I go to WSCONFIG and WSADMIN all the services are there. This makes sense as this is an upgraded version and the services where already created using these transactions. Nonetheless, I am still disoriented I cannot find relation between the soamanager and the wsconfig / wsadmin transactions.
Frankly, I am starting to believe that I should release the services with the WSCONFIG / WSADMIN, and forget about the soamanager until SAP create a meaningful guide of how to work with this application as currently it makes no sense at all.
Or perhaps there is a how-to of the configuration steps to perform once a ES Bundle has been activated.
kind regards

ESA Authentication Log

Hi all,
We have two IronPort Email Security Appliances and one Management Security Appliance. I just took a look at the authentication log on one of my ESAs and I saw that the user "smaduser" was connecting from the MSA every few seconds. This makes sense - the MSA has to check for message tracking information, etc. - but it makes the signal/noise ratio in the log extremely high. Is there any way to keep the ESA from logging this normal activity or would we have to filter it out after FTP'ing the log from the device?
Thanks,
- Steve

Hi Steve,
you can try changing the log level of the authentication log by running the command logconfig on the CLI. Select EDIT and the authentication log file. The log level will be most likely 3 Information. You can try chaning it to 2 Warning and see if that helps.
Log level:
1. Critical
2. Warning
3. Information
4. Debug
5. Trace
Otherwise you will need to filter it out once downloaded from the appliance.
Regards,
Enrico

[BUG] Agilent ESA PSA Series LabVIEW driver for Models E4401B and E4402B

Agilent ESA PSA Series LabVIEW driver are not working with Models E4401B and E4402B.
Driver Version 2.1.1
LabVIEW: 2009
Web Link: http://sine.ni.com/apps/utf8/niid_web_display.download_page?p_id_guid=309EBE8FF8BC0E76E0440003BA7CCD...
Problem: ID Query in "Agilent ESA PSA Series.lvlib:Initialize.vi". ID Answer from Instrument is not match with strings in Match Array. Somebody left whitespace at the strings end. ("Hewlett-Packard,\sE4401B\s" and "Hewlett-Packard,\sE4402B\s").
Everything else is working well.

Hi JCC,
Thanks for bringing this to our attention, a Corrective Action Request has been created: CAR - Corrective Action Request - #247239 and a member of R&D will take a look into this to get the issue resolved.
Kind Regards,
Applications Engineer

Role of technical guy in ESA/CAF

Hi all,
I dont know if this is a correct forum or not But I wanted to know firsthand from the ESA community.
   I worked as a J2EE consultant for 5 years. I moved to SAP integration, NetWeaver and EP about year and half back. I have had roles varying from pure coding to architecting applications. When I saw ESA, I got excited and started reading about it. As a J2EE consultant with pretty decent ABAP and R3 knowledge, I thought ESA/CAF should be a familiar and right turf for me.
As I read more about ESA, I got confused as to the role of a technical guy in ESA.
If my understanding is correct, SAP is on its way to publish most of its BAPI/RFMs across its products as web services. What would be left now are ESA enable non SAP systems and writing composite applications using CAF and ESA.
Given this background I want to ask the following questions
1.     How many companies have adopted/looking at adopting ESA?
2.     How many of those organizations are looking at
        ESA enabling non SAP systems?
3.     Will there be a role to any technical guy in
        that enablement? (j2ee,netweaver java etc etc)
4.     Can a technical only guy survive in ESA space
        without business knowledge?
I may be entirely wrong in my assumptions. Your experiences and opinions would be greatly appreciated.
Regards
Pallayya Batchu

I appreciate your quite response. You rightly pointed that one cannot servive without functional knowledge. But this question still nags my mind.
Is ESA for only functional guys? (because all the webservices are written by SAP or its parters and implementing company is expected to use them by orchestrating.......?)
    Do you expect other companies to create web services? If so, from exising components or from scratch?Again if the answer is from scratch then the implementing company need functional as well as technical guys. It might be correct that the technical guy has to know business before effectively designing web services.
Am I thinking correctly here?

Cisco ESA Deployment

Hello Everyone,
I have seen deployment guides of Cisco ESA stating that the ESA is to be deployed in the DMZ network
Can We deploy Cisco ESA and also the internal mail server in the same network ?

You can, but you need to make sure that email (inbound and outbound) flows through the ESA and nothing is direct to your email server. Putting ESA on the edge does make the deployment and future troubleshooting easier.
Hope it helps.

Learnins ESA

Similar Messages

Maybe you are looking for