Solution on IPS Placement

Dear Pros,
Project explanation:
Pair of pix firewall configured as failover.The outside of the pix pair connected to the internet gateway router 3825.Inside of the pix pair connected to the core switch ports configured with the vlan.The configuration as below
Outside : 192.168.102.0
Active pix out: 192.168.102.2
Sec.Pix out : 192.168.102.3
3825 Gieth : 192.168.102.1
Inside PIX : 192.168.101.0
Active pix in : 192.168.101.2
Sec.PIX IN : 192.168.101.3
Core SVI in : 192.168.101.1 (Gway for the vlan)
Now i decided to connect the ips 4240 in inline ips mode by connecting ips's outside to the pix inside segment and ips
inside to the core switch 4510R vlan interface that has been priviously connected to the pix inside segment.
I have 5 vlans inside the core 4510R created with 172.16.16.0/24,172.16.17.0/24,172.16.18.0/24....
I already configured the ips 4240 with 2 infs pairs and assigned to the sensin engines.I need to know
the other steps to configure to allow the traffic inline thro the ips.Also i want to know the blocking concept and here
do we need to configure the blocking for the 5 inside networks?
Please give me the solution details.
Thanks
swamy

Based on your scenario, pls have a look at the logical and physical connectivity of your devices.
This is due to the devices limitations, especially the switch where you only have 1 x Cat4510R available. Therefore, you need to host all connection to this switch to cater for IPS - Firewall connectivity.
This design is to allow you to filter traffic from Internet coming into your Internal network and vice-versa.
Basically, you need to have 2 x Layer 2 Vlans on your Cat4510R switch, for (example):
- Vlan 102 - host router interface, IPS and PIX Outside interfaces
- VLan 11 - host PIX inside interfaces and IPS
Maintain the existing Vlan with interface IP of 192.168.102.1, which was shared with PIX Inside interfaces IPs as well.
I have implemented similar setup, and it works fine.
As for your blocking concept, you need to use ACL to permit/deny who/ports, and apply it relevant Vlan interfaces.
Hope this works. Pls rate all useful post(s).
AK

Similar Messages

I'm looking for Failover/High available solutions for IPS 4200 Series

Hi all,
I tried to find out Failover/High available solutions for IPS 4200 series,I didn't saw failover solutions in IPS guide document. Anybody can be help me!

I do not know if this is documented anywhere, but I can tell you what I do. As long as the IPS 4200 has power, with the right software settings, the unit can fail such that it will pass traffic. Should the unit loose power, it does stop all traffic. I run a patch cable in parallel with the in line IPS unit, in the same VLAN, with a higher STP cost. Thus all traffic will traverse the IPS unit when possible, but should something happen to it, a $10 patch cable takes over.
Mike

Solution for IPS/HA needed.

Hi,
I need some help here.
I have to integrate an IPS into an existent redundant network. This network always has two redundant switch links. There is also a redundant pair of Checkpoint firewalls. I have to implement two ASA/IPS in front of these firewalls and keep the redundancy. I also need to use the transparent mode to reduce the implantation impact, and an active/standby failover mode.
So I decided to use the following physical topology (ignore the dots):
sw1--ips1--sw3--fw1
|....................|
|....................|
sw2--ips2--sw4--fw2
The problem with this topology is the L2 loop and STP. The SPT will block a port to avoid this loop. But the converged topology will have problems.
If the STP topology is like this one bellow, traffic from a host connect to sw1 to a host connected to sw2 will have to pass both IPS, including the standby unit.
sw1--ips1--sw3--fw1
|
|
sw2--ips2--sw4--fw2
On other side, if the STP topology is like this one bellow, traffic from fw1 to fw2 will have to pass both IPS, including the standby unit.
sw1--ips1--sw3--fw1
|
|
sw2--ips2--sw4--fw2
Moreover, if the STP topology is like one of the two bellow, I can force the topology to direct traffic to the active IPS. But the STP topology should change, if the active IPS fail.
sw1--ips1 sw3--fw1
|.......................|
|.......................|
sw2--ips2--sw4--fw2
sw1--ips1--sw3--fw1
|......................|
|......................|
sw2--ips2 sw4--fw2
Am I missing anything here? Is there any other solution for HA/IPS?
Any comment will be appreciated.
Paulo Roque
Network Engineer
SPCBrasil

Thx Robert.
I have considered a solution similar to yours, but a question raised from that solution: if I issue a 'no failover active' command to force the standby unit to become active, the STP topology should also be modified to make the traffic pass thru the new active ASA.
This STP topology change will not be automatic. And even worst, this will never happen in a situation were the ASA fails over by other reason.

Solution Manager Data Extraction for BW

Hi,
We have a Solution Manager in place for SAP Systems. Our requirement is to extract data from Solution Manager into BW and provide BW Reports for Solution Manager Reporting & analysis.
What are the standard DataSources/Extractors available in solution manager for this?
What are the Business Contents (Infosources) available in BW?
Any help will be rewarded.
Regards
Prasad

Hi Prasad,
have you already found the related IMG tree? It guides you through the setup.
Transaction SPRO -> SAP Reference IMG -> SAP Solution Manager -> Scenario-Specific Settings -> Operations -> BI Reporting
transaction: RSA5 (Installation of DataSource)
- 0SM_SMG_ROOT                   Oberster Knoten Solution Manage
-- 0SM_SMG                        Solution Manager
--- 0SM_DSWPBI_DB390
--- 0SM_DSWPBI_DB400                  DB400 Data
--- 0SM_DSWPBI_DBADA                  Adabas Data
--- 0SM_DSWPBI_DBDB2                  DB2 Data
--- 0SM_DSWPBI_DBINF                  Informix Data
--- 0SM_DSWPBI_DBMSS                  SQL Server Data
--- 0SM_DSWPBI_DBORA                  Oracle Data
--- 0SM_DSWPBI_MODUL                  Module Data
--- 0SM_DSWPBI_PERF                   Performance Data
--- 0SM_DSWPBI_SERVER                 Server Data
--- 0SM_DSWPBI_SYSDATA                System Details Data
--- 0SM_DSWPBI_SYSTEM                 System Data
Best regards,
Ruediger Stoecker

What types of third party loyalty solution can SAP POS 9.5 intergrate with

What types of third party loyalty solution can SAP POS 9.5 intergrate with (reserached already Rediron, and DBS)?
Looking For Loyalty\rewards and giftcard solution. Any advice would be appreciated.

Hi Hiram,
The SAP POS Suite has solutions already in place for Loyalty - Allegiance Analytics and for Gift Card - SVA. However, there are other 3rd party options that can be incorporated into the POS as well, but you would need to contact those vendors directly.
Regards,
Mark

Evaluating cisco IPS AIP-SSM-10 allong side Tipping Point S330

Hello all,
What are your thoughts on this matter? I am also going to be looking at the Palo Alto solution for IPS as well.
I'm probably going to use the cisco 4200 sensors if they offer multi segment like the tipping point does.
I'm looking at protecting the perimiter but NOT replacing my current firewall. The current firewall is the Microsoft TMG.
I like what I see on the Cisco IPS express. I've also looked at the CSM for management. It seems that Cisco is a lot more flexible when it comes to editing and managing the signatures.
ARe there similar experiences out there that you would like to share?
Thanks!
Kurt

Both products are pretty strong. But Tipping point have a much more comprehensive, promptly updated, and a well managed signature base. Both products can monitor multiple segements (terminologies are different).
A good way to compare is to subsribe to their IPS signature updates and see the difference, I mean both from Cisco and DV labs
BR
Farrukh

Placing IDS and IPS

Hi,
Kindly brief about placement of NIDS in a bank network scenario and IPS placement also...

You didn't get an answer because the question is too vague. I think that banks have different requirements depending on their size. As I recall, there can be different regulatory bodies involved (OTS vs OCC) based on size.
I would say at a minimum you should have IDS/IPS at all perimeter points. A bank should probably also have some sort of IDS/IPS protecting servers (Network and/or Host based).
You might take a peek here for some more high-level info:
http://www.ffiec.gov/ffiecinfobase/html_pages/it_01.html

IPod touch is locked for 44 years,whats the solution

I have an ipod touch that got locked and says its locked for 44 years, is there a solution?

Disabled
Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
iOS: Wrong passcode results in red disabled screen
If recovery mode does not work try DFU mode.
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
For how to restore:
iTunes: Restoring iOS software
To restore from backup see:
iOS: How to back up
If you restore from iCloud backup the apps will be automatically downloaded. If you restore from iTunes backup the apps and music have to be in the iTunes library since synced media like apps and music are not included in the backup of the iOS device that iTunes makes.
You can redownload most iTunes purchases by:
Downloading past purchases from the App Store, iBookstore, and iTunes Store
If problem what happens or does not happen and when in the instructions? When you successfully get the iPod in recovery mode and connect to computer iTunes should say it found an iPod in recovery mode.
If you previously synced to the computer then you may be able to recovery use of the iPod without erasing the iPod by following the instructions here:
Disabled Recovery-must use syncing computer.

Compiz Standalone automount solution

Was planning on trying out a solution that I found on the forum, but realize it is VERY outdated and the package in question no longer exists:
https://bbs.archlinux.org/viewtopic.php?id=52626
does anyone have a newer solution to this problem?

yeah, xfe only handles fstab stuff and already mounted disks... but this seems like a universal solution, especially for obscure environments...
now if I could find an agnostic solution for the "places" plugins on the standard DE's, I'd be good!

Background in SM37

Hi all,
I am trying to create a background job in a program using FMs JOB_OPEN,JOB_SUBMIT .... and dont want the job to be executed immediately , but the user should go to SM37 and schedule the job for the job name created by the above program.
How do i achieve this. PLs help with your ideas.
Thanks,
Stock

stock sys,
Scheduling Background Jobs:
1.        Background jobs are scheduled by Basis administrators using transaction SM36.
2.        To run a report in a background, a job needs to be created with a step using the report name
and a variant for selection parameters. It is recommended to create a separate variant for each
scheduled job to produce results for specific dates (e.g. previous month) or organizational units (e.g.
company codes).
3.        While defining the step, the spool parameters needs to be specified
(Step-> Print Specifications->Properties) to secure the output of the report and help authorized users
to find the spool request. The following parameters needs to be maintained:
a.        Time of printing: set to Send to SAP spooler Only for now
b.        Name abbreviated name to identify the job output
c.        Title free form description for the report output
d.        Authorization a value defined by Security in user profiles to allow those users to access
this spool request (authorization object S_SPO_ACT, value SPOAUTH). Only users with matching
authorization value in their profiles will be able to see the output.
e.        Department set to appropriate department/functional area name. This field can be used in
a search later.
f.        Retention period set to Do not delete if the report output needs to be retained for more
than 8 days. Once the archiving/document repository solution is in place the spool requests could
be automatically moved to the archive/repository. Storage Mode parameter on the same screen
could be used to immediately send the output to archive instead of creating a spool request.
Configuring user access:
1.        To access a report output created by a background job, a user must have at
least access to SP01 (Spool requests) transaction without restriction on the user
name (however by itself it will not let the user to see all spool requests). To have
that access the user must have S_ADMI_FCD authorization object in the profile with
SPOR (or SP01) value of S_ADMI_FCD parameter (maintained by Security).
2.        To access a particular jobs output in the spool, the user must have
S_SPO_ACT object in the profile with SPOAUTH parameter matching the value used
in the Print Specifications of the job (see p. 3.d above).
3.        Levels of access to the spool (display, print once, reprint, download, etc) are
controlled by SPOACTION parameter of S_SPO_ACT. The user must have at least
BASE access (display).
On-line reports:
1.        Exactly the same configuration can be maintained for any output produced
from R/3. If a user clicks Parameters button on a SAP Printer selection dialog, it
allows to specify all the parameters as described in p. 3 of
Scheduling background jobs section. Thus any output created by an online report
can be saved and accessed by any user authorized to access that spool request
(access restriction provided by the Authorization field of the spool request
attributes, see p. 3.d of Scheduling background jobs section).
Access to reports output:
1.        A user that had proper access (see Configuring user access above) can
retrieve a job/report output through transaction SP01.
2.        The selection screen can be configured by clicking Further selection
criteria button (e.g. to bring Spool request name (suffix 2) field or hide other
fields).
3.        The following fields can be used to search for a specific output (Note that
Created By must be blank when searching for scheduled jobs outputs)
a.        Spool request name (suffix 2) corresponds to a spool name in p. 3.b in
Scheduling background jobs section above).
b.        Date created to find an output of a job that ran within a certain date range.
c.        Title corresponds to spool Title in p. 3.c in Scheduling background jobs
section above).
d.        Department - corresponds to spool Department in p. 3.e in Scheduling
background jobs section above).
4.        Upon entering selection criteria, the user clicks the Execute button   to
retrieve the list of matching spool requests.
5.        From the spool list the user can use several function such as view the
content of a spool request, print the spool request, view attributed of the spool
request, etc. (some functions may need special authorization, see p.3 in
Configuring user access)
a.        Click the Print button   to print the spool request with the default attributes
(usually defined with the job definition). It will print it on a printer that was
specified when a job was created.
b.        Click the Print with changed attributed button   to print the spool request
with the different attributes (e.g. changing the printer name).
c.        Click the Display contents button   to preview the spool request contents. A
Print    and Download   functions are available from the preview mode.
Don't forget to reward if useful

PowerBook G4 boots to Open Firmware without keyboard access

Summary:
Let me provide a little backstory.
According to the [DARPA Visitor Guidelines|http://www.darpa.mil/body/visitor_guidelines.html] wireless network technology is prohibited from DARPA facilities. Laptops with a wireless card are required to be "disabled at the BIOS level".
Before an upcoming visit to DARPA I was told that I would need to make sure my laptop wireless card was disabled. I mentioned that Macs don't have BIOS but I'd look into doing it in Open Firmware. The response from DARPA was that no one has ever successfully brought an Apple laptop into the facility, and that I should procure a PC laptop for my visit. Ah, a challenge!
I booted into Open Firmware (⌘⌥OF), located the wireless card in the device tree, and removed two properties I figured the driver would be searching for: the vendor ID, and the product ID. I exited Open Firmware and continued to boot into Mac OS X v10.5.2.
Sure enough the System Profiler showed that no wireless card was installed. Success! Now I just need to make the device tree modifications persist between reboots.
It seemed the solution was to place the Open Firmware commands I issued to disable the card into nvramrc. So I set nvramrc to contain the same commands, and set use-nvramrc? to be true. I rebooted the machine but the card was still detected.
A bit [more research|http://docs.sun.com/app/docs/doc/805-4436/6j4719c8v?a=view] revealed that the device tree is not created by Open Firmware until after the nvramrc is executed. The solution is to build the device tree in the nvramrc and tell Open Firmware not to rebuild it. The documentation states that this is accomplished with the probe-all, install-console, and banner Forth commands. I added those commands to my nvramrc and rebooted. The contents of nvramrc:
probe-all install-console banner
dev wireless
" device-id" delete-property
" vendor-id" delete-property
The outcome... well technically the laptop has wireless disabled. Almost everything is disabled. The machine now boots directly into Open Firmware with a few ominous bits of output and no response from the keyboard.
no active package
Apple PowerBook5,6 6.4.9.1f1 BootROM built on 01/21/05 at 10:51:16
Copyright 1994-2005 Apple Computer, Inc.
All Rights Reserved.
Welcome to Open Firmware, the system time and date is 05/06/2008 10:00:00
Command security mode
To continue booting, type "mac-boot" and press return.
To shut down, type "shut-down" and press return.
ok
0 > _
The first sign that something has gone wrong is no active package. The second message just throws another wrench into the works: Command security mode. Yes, the Open Firmware password was enabled. In retrospect this was a bad thing to have set when mucking about in OF. I knew of the RAM change trick (see below) so this was not an issue at the time.
Question:
So the question is: What actions do I need to take to return the laptop to a useable state. That is, booting into Mac OS X.
*Attempted solutions:*
+1. Reset nvram+
The first and most obvious solution is to reset nvram using the snag key combination ⌘⌥PR. Unfortunately do to the firmware password being set, [all snag keys have been disabled|http://support.apple.com/kb/HT1352]. This means no target disk mode (⌘T), boot from CD (⌘C), boot from network (⌘N), etc... In any case an attempt at resetting nvram yields an additional message being appended to the Open Firmware screen:
Release keys to continue!_
+2. Reset nvram after changing amount RAM in system+
Luckily there is a work-around to firmware password protection. Changing the amount of RAM installed in the machine should allow the nvram zap snag to function. I removed one of the two 512MB DIMMS in the laptop and started up while holding down ⌘⌥PR. This results in the same message as above:
Release keys to continue!_
Not so lucky.
+3. Reset the Power Management Unit+
[Resetting the Power Management (PMU)|http://docs.info.apple.com/article.html?artnum=14449] is accomplished by removing the battery and disconnecting the power cord, and then holding down the power button for about 5 seconds. This had no effect besides resetting the system clock to 01/01/1904 00:00:41.
Getting more desperate...
+4. Search logic board for CUDA+
I [opened the machine|http://www.ifixit.com/Guide/Mac/PowerBook-G4-Al-15-Inch-1-5-1-67-BT-2-0 -LR/64] to search for a hidden [CUDA button|http://docs.info.apple.com/article.html?artnum=86760]. As expected, a CUDA button does not exist on this model and the PMU reset is accomplished as noted in attempted solution 3.
+5. Remove internal battery+
Well the laptop is open now, so I tried removing the internal memory backup battery and revisited each of the above solutions. No success.
+6. Remove hard drive+
Again, since the laptop was open, why not remove the hard drive and see what happens. The machine wasn't even making it to the boot-loader hand-off so I didn't expect this to produce any results. No results produced.
Thinking crazy thoughts...
+7. Attempt a firmware update+
Firmware updates have a side effect of resetting the nvram. Also firmware updates are initiated very early in the startup process by holding down the power button until a tone is heard and the power light flashes. My thought was that I would grab a previous firmware update for this laptop and force it to be reapplied. Unfortunately there have been no updates to this model's firmware.
+8. Write my own firmware update script+
While investigating solution #7 I realized that the file BootROMFirmware installed by the firmware updaters for G5s and G4s machines are just Forth programs with a binary payload attached to the end. I learned [Forth|http://en.wikipedia.org/wiki/Forth(programminglanguage)]. The BootROMFirmware files are really cool, since they do everything from drawing the progress bar during the update, uncompressing and check-summing the binary payload, and generally making sure you don't brick your machine. In any case it seem entirely doable to write my own program in Forth and undo the evil I did before. I really only need to flip one bit. I needed the use-nvramrc? variable set to false. So I created this very simple Forth program:
\ debrickifier
setenv use-nvramrc? false
reset-all
The original firmware file had additional attributes set, a creator and file type of fw99. So I set those two attributes on my file as well. I ran strings on the firmware installer program and guessed that it was copying the file to /System/Library/CoreServices. So this is where I placed my Forth file. Reinstalled the drive and rebooted the laptop while holding down the power key to initiate a firmware install. No dice.
Its hard to tell why this is failing. The file may in the wrong place, have the wrong permissions. From what I've reviewed in the original files, the setenv and reset-all words should be available. Maybe the Firmware Update utilities are setting some other magic in nvram before the reboot.
I think I've covered all the different major solutions that I've attempted. Their might be a few more that I've forgotten to mention (like using an external USB keyboard). I still think that getting some Forth to execute via the firmware update mechanism could use some more exploration. My current worst case is that I'll replace the logic board, although I'd hate to do that when I know there are only a few bad bits flipped in a CMOS somewhere.
I'm hoping to snag the attention of the resident hardware/firmware guru that can shed some light upon the firmware update process, but any help or suggestions would be greatly appreciated.
Cheers,
Mark

For your next DARPA visit, another option might be to buy the cheapest possible third-party wireless card — it doesn't even need to work. Insert it into your Powerbook's CardBus slot before visiting DARPA, and turn Airport off in System Prefs. On arrival at DARPA, remove the card from the Powerbook and hand it to the security guard. Retrieve it from the guard as you leave, and turn Airport back on again when you get home or back to your office. Unable to comply with the letter of the dunderheaded regulation because you have no BIOS, you will be complying with the spirit of it instead, and no one will be the wiser.

I am happy with the CC format- it works for me

There are a million and one negative threads about the new CC stuff. But I wanted to start a thread with a different tone.
I realize that the majority of those in the forum probably see the CC change as a negative one. And in complete honesty, I understand their reasons, and even AGREE with them. The lack of an exit strategy from the cloud is a problem, though Adobe does say they are working on a solution. The place I work has no plans on upgrading to CC, though it's only maybe 10 users that are affected.
But on a personal level, the CC option is a huge blessing to me. Though I do work in an environment where software is provided for me(we're currently on CS 5.5), with a new baby on the way and daycare costs taking up half my salary, I am ramping up my freelance business again as sometime in the next year, I'll probably become a stay at home dad.
I've never been able to afford the Adobe suites outright. My wife and I do have a certain amount of personal money set aside each month to spend, but it's very difficult to come up with enough to purchase the suites.
So when I saw that I could get everything for $30 a month for the first year(I do have a CS3 or above product registered), I was very happy. As somebody trying to get my freelance business running full speed again, this is a perfect opportunity for me to get into the Adobe software outside of my place of employment. And if things go well, the $50 a month after that won't be a problem. If I'm not making enough to afford $50 a month, then I'm probably not running the best business and probably won't be needing the tools for long.
So this arrangement works perfectly for me. I do web design AND video/motion graphics editing, so having everything at my disposal is ideal.
So in the sea of negativity that exists here in the forums(and not for bad reasons), I just wanted to say that I'm happy with this. Adobe have provided a way for me, who doesn't have a ton of money flowing in, to get into the great tools I already know and love. And in my view, at least temporarily, if I'm finding success, the continued fee is more than justifiable. So I want to say thank you to Adobe for providing this opportunity.
Now, if I can please ask that this thread doesn't turn into yet another one of the already extensive number of threads bashing CC, and hopefully others who are thankful for this plan can chime in. Maybe nobody will, but I'm sure there are others out there. I just don't want this to degenerate into the same thing you can read in every other topic. Yes, I know that when I want to get off "the cloud", there are things to consider. I'm aware, and I accept that. Let's leave it at that.
Thanks!
Brent

Biggles Lamb wrote:
Chill out guys, getting personal will never ever change another persons view, right or wrong, they are entitled to them .
The pros and cons of to CC or not to CC have been done to death
Its a fact the CC model will work for some, especially newbies and small businesses.
The risks associated with the CC model have been well documented.
For long term users of CS perpetuals its generally a large hike up in cost compared to the upgrade system.
Then there are the....... Adobe can rot it hell...... group who will never subscribe
To each their own, you do the math to suit your cashflow whatever that is and then make an informed decision
To those on the CC model, I'd like to offer some practical advice.........do not allow automatic updates.........make regular backups............develop an exit strategy of alternatives for when you can no longer afford the subscription costs............never ever assume that the Adobe update is bug free
Enjoy your cloud
Col
Thank you for that post, and the advice. I just happen to be one of those who it does work for. I've been around long enough to know that CC isn't going to work for everyone(the large publishing/radio/web company I work for isn't upgrading to CC because of the costs involved). But it does for me as I potentially venture out into the full-time freelancing world and away from the more structured big office environment. I can't make decisions based on what is best for anyone else, or what will hurt or help Adobe. Just what affects me, and that's all.
Brent

How to avoid redeclaring your web service interface?

Hi there,
How can one avoid having to redeclare your wsdl interface on
each mxml page where it is accessed? I only want to declare the web
service and the operation is has once and then just include it in
the component where I use it to access/update data.
I am new to flex so this may be obviouse to other but not me.
I tried including it in its own mxml file and then using the normal
component include tag to include it. I get errors about not being
able to access the webservice via its id.
e.g.
Error: Access of undefined property WebService.
[mxmlc] WebService.getSiteOptions.send();
thanks

The solution is to place the web definition in a separate
file and then use the "include" like functionality of defining your
own namespace in the xml. You do the include in the main
application file.
eg
<mx:Panel
xmlns:mx="
http://www.adobe.com/2006/mxml"
xmlns:webservice="webservice.*"
width="100%"
height="100%"
title="Reports Menu"
creationComplete="onInit();" >
On the main application page to include your web service file
do a
<webservice:webservices id="services"/>
The webservices.mxml file will contain your definitions.
<?xml version="1.0" encoding="utf-8"?>
<mx:Canvas xmlns:mx="
http://www.adobe.com/2006/mxml"
height="0"
visible="false">
<mx:Script>
<![CDATA[
import mx.rpc.soap.mxml.WebService;
import mx.rpc.events.FaultEvent;
import mx.controls.Alert;
[Bindable]
public var webServiceWSDL:String ="
http://127.0.0.1:8080/jumpingbean/services/AddWebService?wsdl";
public function onServiceFault(evt:FaultEvent):void
var err:Error = new Error(evt.fault.faultCode + " , " +
evt.fault.faultString);
parentApplication.showError(err);
public function onSuccess(evt:Event):void
Alert.show(evt.toString());
]]>
</mx:Script>



<mx:WebService id="webservice"
wsdl="{this.webServiceWSDL}" service="ValueAddWebService"
port="AppWebServiceHttpPort" fault="onServiceFault(event)"
showBusyCursor="true" >
etc
In your child components you can refer to the component by
doing a "parentApplication.services.webservice"

RoboSource Licensing?

We purchased two licenses for RHx7 and (YAY!!!) RH now has
multi-author capability (I was stuck on x4).
My architectural solution is to place RoboSource Control
client on the two author's machines that have RH, and having a SQL
database with RSC server instance.
Software Compliance decided to check with Adobe about
licensing concerns with placing the RSC server instance on a
machine (SQL Server) that didn't have a purchased license of
RoboHelp. I tried to explain that this shouldn't be the case, that
all RSC is doing is providing an interface for the source files (we
are installing per the excellent article that M. Ellison wrote).
Adobe told them we needed RoboHelp server. I think this is
unnecessary, we have our own publication & feedback solution
(due to business continuity requirements).
I have looked high and low on this site concerning RSC
installation and haven't been able to find anything pertinent to
licensing. It seems that because this was shipped with RH7, it was
understood by Adobe that we needed this to use a multi-authoring
environment and if needed, one could place RSC Server on a server
to act as the repository for the source files.
Does anyone know the answer?

heavywriter, I have replied to your query on another thread
that you don't need RoboHelp Server to use RoboSource Control
Server. Best usage of RoboSource Control Server is as M Ellison
wrote in his article.
Vivek.

How to schedule the background job daily twice?

Hi,
How to schedule the background job daily twice? any conditions?
Regards,
Srihitha

see the step by step procedure.
Scheduling Background Jobs:
1. Background jobs are scheduled by Basis administrators using transaction SM36.
2. To run a report in a background, a job needs to be created with a step using the report name
and a variant for selection parameters. It is recommended to create a separate variant for each
scheduled job to produce results for specific dates (e.g. previous month) or organizational units (e.g.
company codes).
3. While defining the step, the spool parameters needs to be specified
(Step-> Print Specifications->Properties) to secure the output of the report and help authorized users
to find the spool request. The following parameters needs to be maintained:
a. Time of printing: set to Send to SAP spooler Only for now
b. Name abbreviated name to identify the job output
c. Title free form description for the report output
d. Authorization a value defined by Security in user profiles to allow those users to access
this spool request (authorization object S_SPO_ACT, value SPOAUTH). Only users with matching
authorization value in their profiles will be able to see the output.
e. Department set to appropriate department/functional area name. This field can be used in
a search later.
f. Retention period set to Do not delete if the report output needs to be retained for more
than 8 days. Once the archiving/document repository solution is in place the spool requests could
be automatically moved to the archive/repository. Storage Mode parameter on the same screen
could be used to immediately send the output to archive instead of creating a spool request.
Configuring user access:
1. To access a report output created by a background job, a user must have at
least access to SP01 (Spool requests) transaction without restriction on the user
name (however by itself it will not let the user to see all spool requests). To have
that access the user must have S_ADMI_FCD authorization object in the profile with
SPOR (or SP01) value of S_ADMI_FCD parameter (maintained by Security).
2. To access a particular jobs output in the spool, the user must have
S_SPO_ACT object in the profile with SPOAUTH parameter matching the value used
in the Print Specifications of the job (see p. 3.d above).
3. Levels of access to the spool (display, print once, reprint, download, etc) are
controlled by SPOACTION parameter of S_SPO_ACT. The user must have at least
BASE access (display).
On-line reports:
1. Exactly the same configuration can be maintained for any output produced
from R/3. If a user clicks Parameters button on a SAP Printer selection dialog, it
allows to specify all the parameters as described in p. 3 of
Scheduling background jobs section. Thus any output created by an online report
can be saved and accessed by any user authorized to access that spool request
(access restriction provided by the Authorization field of the spool request
attributes, see p. 3.d of Scheduling background jobs section).
Access to reports output:
1. A user that had proper access (see Configuring user access above) can
retrieve a job/report output through transaction SP01.
2. The selection screen can be configured by clicking Further selection
criteria button (e.g. to bring Spool request name (suffix 2) field or hide other
fields).
3. The following fields can be used to search for a specific output (Note that
Created By must be blank when searching for scheduled jobs outputs)
a. Spool request name (suffix 2) corresponds to a spool name in p. 3.b in
Scheduling background jobs section above).
b. Date created to find an output of a job that ran within a certain date range.
c. Title corresponds to spool Title in p. 3.c in Scheduling background jobs
section above).
d. Department - corresponds to spool Department in p. 3.e in Scheduling
background jobs section above).
4. Upon entering selection criteria, the user clicks the Execute button to
retrieve the list of matching spool requests.
5. From the spool list the user can use several function such as view the
content of a spool request, print the spool request, view attributed of the spool
request, etc. (some functions may need special authorization, see p.3 in
Configuring user access)
a. Click the Print button to print the spool request with the default attributes
(usually defined with the job definition). It will print it on a printer that was
specified when a job was created.
b. Click the Print with changed attributed button to print the spool request
with the different attributes (e.g. changing the printer name).
c. Click the Display contents button to preview the spool request contents. A
Print and Download functions are available from the preview mode.

Solution on IPS Placement

Similar Messages

Maybe you are looking for