Sourcefire AD user agent

We're seeing this error in the user agent:
Unable to attach event listener to adserver.domain.com. Check firewall settings on AD Server. Operation is not supported on this platform.
The agent is installed on a member server and the connection to the AD server is successful. 

Hi..
Normally there is not problem on a separate server - I have done this in the past. 
But this time it does not work.
If I assign domain admin rights to the user it works. 
We have double-checked the DCOM and WMI settings without luck..
Waiting for TAC to respond.
Best regards
Tue

Similar Messages

  • SourceFire/FireSIGHT User Agent Won't Open on Windows 2008 Server

    I have downloaded v 2.2-18 of the Sourcefire User Agent to use with my FireSIGHT Management Center. I installed the agent on a Windows 2008 R2 server. When I try to open the agent to configure it the program crashes with the exception:
    Application: Configure Sourcefire User Agent.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.TypeInitializationException
    Stack:
       at SFCommon.DB.GetSystemSettingsCache()
       at GUI.UserAgent.LoadConfig()
       at GUI.UserAgent..ctor()
       at GUI.Program.Main()
    I verified that I have at least .NET Framework 4.0 installed (does this with v4.0 and 4.5.2). The program works on a straight Windows 7 machine. Anyone else seen this issue or can anyone tell me what I need to change to get this to work?
    Thanks.

    Hi,
    Did you manage to successfully install SQL Server Compact 3.5 as well as .NET v4 prior to installation of the agent? I've seen similar errors where the installer did not automatically download and install SQL CP.
    Thanks

  • Sourcefire AD user agent won't start

    I have tried to install the user agent on a server 2008 vm and it won't run. I only get an error that says "SF AD user agent Configuration has stopped working" 
    I have configured the server settings in Policies, User, User Agents on my Defense Center. This is a domain server so the firewall is not on by policy. The event logs are pretty cryptic and don't really say much. The agent never starts so I can't configure it. 
    There is not much documentation out there for it.

    Refer the link : http://www.cisco.com/c/dam/en/us/td/docs/security/firesight/user-agent/FireSIGHT-User-Agent-Configuration-Guide-v2-2.pdf

  • SourceFire management system error when I try to delete a user agent

    I'm running into an issue with the Sourcefire management system. When I try to delete a user agent within Sourcefire I get redirected to an error page.
    Running 5.3. I have attached the error.

    Try disabling your antivirus/antispam software.

  • SourceFire Active Directory User Agent

    Has anyone had any stability issues with the Active Direcorty User Agent.
    It seems that we have to restart the service for this program to get the policies in Sourcefire to stick on AD accounts.

    I have the same problem!! I have to restart the service all the time. What is the best method to install the program. I've installed it as a domain admin...a local admin ...what is the best way to install it?
    Thanks

  • Trying to get Firefox to open in User Agent "Internet Explorer"

    I run an Internet Cafe and have recently installed Ubuntu 10.04 over Micro$oft.
    I HAVE to give customers an alternative to Live Messenger.
    I have TokBox setup .. but gives problems now & then.
    I need to cover all bases or lose customers.
    The only viable alternative I have found is '''EBuddy'''.
    Now the problem is .. when I log in using Internet Explorer and I connect to a contact - I can see the start video call "button".
    Any other browser and the webcam button does not show.
    All of the Firefox & Seamonkey User Agent Switchers I have tried work .. but I cannot expect the customer to know that they need to switch User Agent before they can use the webcam.
    I need to Launch either Firefox or Seamonkey (preferably Seamonkey - if the fix is to be a permanent one) in Internet Explorer mode.
    A permanent "fix" for Firefox was suggested on the Ubuntu Forum ...
    1. Open about:config
    2. Right-click, choose "New" > "String"
    3. Type "general.useragent.override" (no parentheses) into the "New String Value" dialog box that appears and press "Enter." Type or copy and paste the desired new user agent string into the "Enter String Value" box (in this case "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)" )
    When you're done, copy that Firefox profile to all of your computers (the .mozilla folder)
    I tried this on Seamonkey .. but it did not have the desired effect = no start video call button.
    There is a Proxy Tool add on for Seamonkey which can change the user agent and this works. Same thing for Firefox.
    But the user agent is back to default on browser re-start.
    In an ideal world I would like to create a Launcher on Ubuntu desktop which would open either Firefox or Seamonkey on the E Buddy sign in page and the User Agent would automatically be set to IE8 or 9.

    Try to set the user agent via a user.js file.
    *http://kb.mozillazine.org/user.js_file
    user_pref("general.useragent.override", "<IE user agent>");

  • Is there a way to change my user agent from Safari to Internet Explorer?

    Hello All,
    I need to fill out a application on line and it appears that it does not recognize Safari.  Sounds like it needs to see IE.  Anyway to temporarily enable IE for this application?  Otherwise I have to go use a PC at the local library....
    These instructions below in no way match my Snow Leopard 10.6.8 on my iMac - they don't make sense to me.  Any help/guidance is appreciated to fill out this on-line form.  Thanks!
    Apple Safari
    If using Safari, you must have Internet Explorer 6.0 or higher version or Firefox 2.0.0.12 - Macversion web browser at the "User Agent" category or higher for Firefox. Use the following instructions to configure your Safari browser to access e-QIP.
    On the Menu Bar
    Select Edit box (top of screen)
    Preferences
    Security
    Accept Cookies (only from site that you navigate to)
    Advanced
    Check the box labeled "Show Develop Menu in Menu Bar"
    Click proxies - Change settings box (Opens to Internet Explorer (IE) Properties Boxes)
    Advanced tab
    Security category is located near bottom of page
    Click "Do not save encrypted pages to disk"
    Click "Empty Temporary Internet Files folder when browser is closed"
    Click/enable SSL 2.0
    SSL 3.0
    TLS.1
    Exit Preferences Window
    On Menu Bar select "Develop User Agent"

    John..
    This may work but no guarantees ..
    Launch Safari. From the Safari menu bar top of your screen click Safari. From the drop down menu click Preferences then select the Advanced tab.
    Select:  Show Develop menu in menu bar
    Now from the Safari menu bar again, click Develop > User Agent
    Try IE 7, 8, or 9.

  • Configuration issue in IE as Document mode: 10 and User agent String: Internet Explorer 8

    Hi,
    I have a telerik rad popup window performing some input operation. The problem is when I use the configuration in IE as Document mode: 10 and User
    agent String: Internet Explorer 8, scroll bars appear in the window from nowhere. It is working fine with every other configuration of IE. I've also used a separate stylesheet for IE 8 but it won't apply in this case. 
    Here are the screen shots of the window.
    Actual view
    With Scorllbar
    Please if anybody could suggest a solution for this weird problem it would be a great help.
    Thanks in advance.
    Neelesh

    Hi,
    It seems we need to talk with the site developers to determine how the sheet would display with different IE user agent string.
    Regarding the user agent string changes, please take a check with the following article:
    Introducing IE9’s User Agent String
    The Internet Explorer 8 User-Agent String (Updated Edition)
    Hope this may help
    Best regards
    Michael Shao
    TechNet Community Support

  • ISE 1.2 Profiling - User Agent attribute incorrect

    Hi all,
    Just troubleshooting some profiling issues and have found that multiple devices are profiling incorrectly eg MAC OSX profiling as Apple-Device. Basically the issue is the user-agent string profiled by ISE is incorrect meaning that only the OUI is matched. During the BYOD onboarding process, non Internet Browser, applications and services (games and OCSP Daemons etc) are presenting their specific user-agent strings eg "OCSPD\1.0.2" to ISE resulting in incorrect profiling.
    Does anybody have any suggestions on how to resolve this issue as it is resulting in about 50% of devices been profiled at the "top level" ie Apple-Device or Windows Workstation (anything based on User-Agent). Can any one explain whether profiler works on the basis of first agent received, last agent received and why it doesn't hold onto a list of presented agents to make a decision? In my mind this is a pretty big issue in that some of the more popular device profiling policies are based on a user-agent string thus potentially preventing you from defining tight Authz policies eg IPAD only etc

    "Unless you have suppression configured, ISE will continue to collect profiling data and will re-profile a device as long as a rule with higher certainty factor is hit. However, if the certainty factor is the same the device will remain at its originally profiled group."
    The suppression feature will not affect the re-profiling of a device.  The suppression only affects the logging on the MnT node.  Since the Profiling is a PSN function the suppression has no affect on the outcome of a profiling event. 
    You are correct in that a rule with a higher certainty factor "wins" and this is the profile that is chosen.  Again, an understanding of how profiles work is not the issue here.  
    For example say only the RADIUS and HTTP probes are being utilized for an endpoint.  There are two endpoints one is a iPad and the other an iPhone.  The endpoint attributes that are known about the device are the MAC OUI and the useragent. 
    Based on the default profiling rules there are two three things that need to be identified either an iPhone or an iPad.  The first common item is that the MAC OUI is identified as apple.  This increases the certainty factor by 10.  The second is either the HTTP User agent containing either iPad/iPhone or the DHCP hostname containing either iPad/iPhone.  Both of those conditions would increase the certainty factor by 20 for a total of 30.  Since DHCP is not being used in this example we can remove that for a possibility and say that for an iPhone to be profiled as an iPhone it must both have a MAC OUI of apple and the useragent must contain iPhone.  Same goes for iPad, but iPad in the useragent. 
    Like smcbridebpc stated every application that uses HTTP will have a useragent string.  The profiler rules assume that the useragent that is being used contains either the word iPhone or iPad to distinguish these types of devices.  If an application on the device sends a useragent string such as  "OCSPD\1.0.2" which is obviously the OCSP Daemon.  This useragent string is "stuck" on the endpoint and no other usable useragents can be used to profile the device.  Therefore a race condition exists and depending on the application that wins determines if the profiler will be accurate or not.   
    The only two solutions that I can think of would be to have a useragent filter that would allow you to manually filter out useragents like "OCSPD\1.0.2" (or the ISE developers could filter known unusable user agents out on the backend)  OR everytime a new useragent is presented to the profiler for a device the useragent is joined to a list of useragents. 
    If the useragent was overwritten everytime a new useragent was presented then it would cause the device to be reclassified everytime the different applications presented useragents which would not be good.  
    It does look like a bug may have been filed and marked as fixed in release pending, but the bug notes do not list enough information to identify if this is the same issue that we are seeing.
    https://tools.cisco.com/bugsearch/bug/CSCuj45373

  • The User-Agent "Java/1.5.0_06" is unknown;creating an agent with null agent

    Hello,
    We're currently on JDeveloper 10.1.3.4.0.4270. We just release a new version of our web app into production. This is an internal web application. application server is weblogic 10. The weblogic log is showing alot of these warning messages. I tried search on this forum and in google but unable to find any information. I really appreciate if anyone has any idea what could be causing these warning. Our users are constantly getting sent back to the login page to to user sessions lost.
    <Jun 8, 2010 12:39:20 AM EDT> <Info> <Common> <BEA-000628> <Created "5" resources for pool "venusDS", out of which "5" are available and "0" are unavailable.>
    Jun 8, 2010 12:39:20 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:39:20 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:39:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:39:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    1698656.832: [GC [PSYoungGen: 145280K->5811K(187264K)] 418915K->302441K(650112K), 0.1285455 secs]
    Jun 8, 2010 12:42:22 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Thanks,
    Joe

    Hi,
    user agent is the browser users use. So what is the browser ?
    Frank

  • Creative Cloud User Agent String spoofing old Chrome Browser?

    Was troubleshooting Creative Cloud not working on our network and noticed it is spoofing an old Chrome browser User Agent String.
    When Creative Cloud launches it presents itself as: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.68 Safari/537.22
    This is the user agent string of Google Chrome version 25 (Chrome is currently at version 32)
    Looking for any information on why Creative Cloud is using an old Chrome user agent string, and why can't it use a unique user agent?

    Creative Cloud chat support (all Creative Cloud customer service issues)
    http://helpx.adobe.com/x-productkb/global/service-ccm.html

  • Have an old web site that I need access. IE 7 or earlier works Firefox 3 or 4 does not. User agent switcher used to have older versions listed but doesn't now. Any other ideas?

    This is an old app to a server that will have no software updates. I can get logged in but when I try to go to any other page within the app it displays about 8 lines of WWWWWWW along the left side of the window followed by my username and message "Please wait page is loading". It never loads. App works with IE7 or older but have never successfully gotten Firefox 3 or 4 to work. Have had some success with User Agent Switcher Add On with some other apps in the past but it now doesn't show browser versions going back far enough to try them.

    I can't guarantee anything, but there's a website that offers old versions of Firefox back to 0.8, so it should have what you need. :-)
    http //www oldapps com/firefox php
    Good luck!
    edit: This is a unofficial download site and not safe. No need for it as Mozilla hosts all since beginning for public access.

  • How to get iphones / ipad user agent for internet access

    Hi.
    We recently setup some wireless, and I'm wondering how I can get iphones and ipads connected to the internet without prompting for a username and password. Even if it does prompt and we put in our domain credentials, things don't work.. it's like it heavily restricts access. However if you put DOMAINNAME\ in front of your user name, then it seems to work.
    Without making static IP reservations and attaching those ip's to no authentication in IronPort... isn't there a way to assign these devices to a policy via their user agent string? Problem is finding that string amongst different versions of iphones and ipads.
    I visited www.ipchicken.com on my iphone and it said Browser: Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_2 like Mac OS X; en-us)
    AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8H7 Safari/6533.18.5
    What part of this do I copy into the user agents field for my no autnentication identity that I'm trying to alter? I tried putting AppleWebKit in, but it still blocks almost everything.
    Right now in this Allowed User Agents identiy i have Windows Update checked, as well as these:
    (MSOffice\x2014)
    Microsoft NCSI
    SSLSoapClient
    AppleWebKit (does not seem to work)
    Thanks for the help!

    I think I figured it out.  Followed this closely:
    https://ironport.custhelp.com/cgi-bin/ironport.cfg/php/enduser/std_adp.php?p_faqid=1426&p_sid=ODIeCGuk&p_lva=1713&p_li=cF91c2VyaWQ9MXJvblAwcnQmcF9wYXNzd2Q9Zm8wQmE1
    Also do you guys know if the custom user agent field can accept wildcards?  Problem is, every version of iOS for iPhone 1, 3G, 3GS, 4, and iPad 1 & 2, or ipod touch (various generations) all have variations in their user strings.  If I could just do a blanket statement for like *iphone* , *ipad*, etc.... that would be easier.
    So are there any wildcards or txt masks that can be put in and interpreted in the custom user agents field?

  • How to retrieve which user-agent in a java portlet?

    Is there a way to get http user-agent info about which browser requested a page with a portlet from within the java portlet?
    It seems like the request.getHeader() always returns the same value no matter what browser we use.
    Have also tried portletRenderRequest.getOriginalHeader() but this method also returns the same result.
    Does the PPE replace these headers or what..?
    Regards,
    Per A Jorgensen

    Hi Per A Jorgensen,
    I see what you mean. I just deployed a simple portlet which displays the user-agent header property.
    Here are my observations:
    1. If you access the page as user1 from Mozilla, I see the following:
    Browser Agent:      Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
    2. If I now access this page from IE, as user1, then I still see my browser agent as:
    Browser Agent:      Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
    3. If I now access this page from IE, as user2, then i see the following details:
    Browser Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
    4. Now I access the same page from Mozilla (after logging out of user1) as user2, I see the following:
    Browser Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
    Hmm.. interesting.. it looks like, whoever access the provider first, fixes the user-agent. I need to investigate more into it to find out information as to why this is happening.
    In the mean-time, you can be rest assured that as long as you dont have multiple user's accessing the portlet as the same user, you will get the correct information.
    thanks,
    Harsha

  • How to delete User-Agent header field from http request ?

    Hi,
    I'm currently using HttpUrlConnection to create a HTTP 1.1 POST client, and I wish to remove the User-Agent field from my request.
    However, java seems to set this field to "java.1.4.2" if none is provided.
    I have found methods to modify the User-Agent ( "setRequestProperty()" and system property "http.agent" ) but none to delete it.
    Is there a way to remove this header from the request ?
    This field is said as "should be implemented" but is not required in rfc2616(http1.1), so I'm a bit surprised that I can't remove it in the java HttpUrlConnection...
    Thank you for your help,
    Gregoire

    You can always go around java.net.HttpUrlConnection with your own subclass of UrlConnection or simply a socket. You may lose some functionality, for example with handling binary content, but it may still be a solution.
    (But are you saying that the server requires that there's no user-agent header? That's not a case of incompatibility, it's a bug. Scrap the server, and get one that works.
    It seems a lot more likely that the server just have strict ideas of what user agents it wants to talk to. Then instead of removing the header, you want to find out what values the server will expect.)

Maybe you are looking for