Synching/Caching Critical Patches across WAN links

It is my understanding that all Microsoft Critical Patches will automatically cache(download), create themselves as bundles and become part of the content-repo which will automatically sync between all primary servers. If I have the check box for caching to the Satellites, they will also automatically cache to the satellites.
Does this happen immediately upon download/caching of the critical patch? Does this mean that if I have 150 remote sites connected over WAN links, my corporate site will be flooding my WAN links with these updates all AT THE SAME TIME? I have both a 10.2 and a 10.3beta testing - I can at least control in 10.3 that it will only happen at night and only take so much of the remote sites' bandwidth, but that still doesn't help out my corporate site's bandwidth if it's trying to send out to 150 remote sites. Any thoughts, suggestions, workarounds or clarification?
Is there any way to know when/what time a patch actually downloaded/cached to the Primary Servers content-repo OR to the Satellite content-repo?

The "Cache automatically to satellites" specifies what to cache, whereas the replication interval (Under Server Hierarchy->Configure Satellite Server) specifies when. So the sequence would be:
1. Keep the "Cache automatically to satellites" checked.
2. Set the replication inteval for the satellites (ZCC->Configuration->Server Hierarchy->Configure Satellite Server) to something very high (say, 999 days). This will prevent satellites from replicating content by themselves
3. Go ahead and set up a scheduler task to run zac wake-cdp at the required time.
Others,
Any other suggestions?

Similar Messages

Management vlan across wan links

I have 50 sites. There is one server at each of the 49 sites. The 50th site has the bulk of the servers. My Director wants me to create a 'management' vlan that spans all 50 sites for the integrated lights out port of all the servers. I don't think that it is necessary or wise to creat vlans that span wan links. Any input is welcome!

NO, DON'T DO IT.......
Why do people suggest such crazy things? Think of the spanning-tree and broadcast implications - jeez I wouldn't even span a VLAN throughout a Campus LAN, let alone the WAN.
I can understand the need to keep this off the main network but I would just create another VLAN at each remote site to cater for this requirement and then maybe protect it with ACL's if need be.
HTH
Andy

TSeries LAN connection issues across fibre link

I have some LAN connection issues when getting dhcp or even assigning static ip to T61 laptop. Doesn't get dhcp ip settings dynamic and if given staitc, can't ping any system on network nor can systems ping it. DHCP is at main site and this laptop is at remote site. Link between sites is fibre. All other systems at remote site where is laptop get their DHCP settings as normal. If I bring laptop from remote site to main site and plug in cable it gets DHCP normal but not at remote site, it doesnt get it, so i know the LAN adapter is good. What is wrong?, what across WAN link it preventing it? seeing that all other systems at remote site get their settings well. Thanks in advance.
Message Edited by ansa on 06-01-2009 03:36 PM
Message Edited by ansa on 06-01-2009 04:14 PM

I was able to resolve the problem. "The following CLI commands have been added to allow devices that do not understand the controller's proxy Address Resolution Protocol (ARP) response without a minimum packet size of 60 bytes to communicate with the controller: show advanced dot11-padding, config advanced dot11-padding enable"

New SCCM deployment for 10,000 users, single domain across 2 sites connected with a fast WAN link

Hi,
I'm looking at rolling out an SCCM 2012 deployment in my environment. We have 10,000 users, a single AD domain, several thousand Windows 7 laptops and desktops, as well as few hundred MAC OS 10.6 devices and we currently use WSUS for updates. We have
2 main sites with the users equally split across the sites and we have an internal PKI.
I'm looking at doing the following:
- deploying a single primary SCCM 2012 site server (site A)
- 1 or 2 distribution points in site B
The main things I'm after are:
- Computer inventory (MAC + Windows)
- Application deployment (MAC + Windows)
- Hardware inventory (MAC + windows)
- Deploy updates (MAC + windows)
- Remotely power on devices and patch overnight
I'm aiming to setup an SCCM infrastructure and aim to achieve the above in a month.
What I'm not sure about is:
- if I need a secondary site server?
- How I should handle WSUS updates ? I don't know if SCCM can leverage the current WSUS infrastructure or whether it's better just to get rid of it and install the WSUS role as part of SCCM?
- I believe that to enable application deployment for MACs I need to install a PKI certificate on my distribution points. If do I this, presumably all my Windows clients will also connect via HTTPs. Are there any downsides to doing this?
If anyone has deployed a similar setup I'd be keen to hear from them.
Thanks in advance

1. WSUS: Be careful here. If you just remove the WSUS policy computers can just revert back to their default setting which would be to connect to the Internet at 3am and automatically install the updates. I've seen this happen on a large site and it is not
pretty. It's better practice to leave the policy in place but to disable automatic updates (or you could change the WSUS server to be your new ConfigMgr WSUS instance - this would have the same effect).
2. Secondary Sites: It's not uncommon for customers to start without the secondary site and monitor the WAN link for excessive traffic. The secondary site can be introduced afterwards if it is deemed neccessary.
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Critical Patch Updates link?

Before Oracle decided to hang OTN off of the Oracle main web-site, there used to be a Critical Patch Updates link on the main OTN page. Anyone know where that has gone to now and how to navigate to it?

http://www.oracle.com/security/critical-patch-update.html
or
http://www.oracle.com/technology/deploy/security/alerts.htm
Edited by: Mike_Charchuk on May 12, 2010 10:02 AM

Best way to initiate Critical Patch Update

Dear All
We are planning to apply Critical Patch Update July 2011, on our (PROD)Live Environment
DB version : 11.1.0.7
Appl Release : R12.1.1
SHARED APPL_TOP : Yes
PCP : Yes
Load Balancer Software/Hardware : Software
DMZ Server : Yes
I have referred Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (July 2011) (Doc ID 1315202.1)
this is taking good amount of time and many questions have popped up
1) Is it necessary to apply CPU for Oracle E- Business Suite when your business is running fine
2) In the above metalink doc i came across oracle fusion middle ware , please correct me is it appl tech stack component or is appl tech also call what is the difference between Oracle Fusion Middleware and Oracle Apps Tech Stack
3) Will CPU Patch boost the performance (as purging of log files )
Order of Applying :
1st Db --
a) how to apply ???
b) i have never applied any db patch till now :( ..
c) what is the estimated time to apply the patch
2nd Apps - how to apply ??
1) is it same as traditional one using adpatch utility
2) Will this create any INVALID Object
Please shed some light on this i have many questions on CPU kindly suggest me how to initiate
- Chetan

Hi;
For us we are applying database CPU patch on our system.It depends which mean you can also can apply someother CPU patch for your system.
We are planning to apply Critical Patch Update July 2011, on our (PROD)Live Environment Why July 2011? Any specific reason?
Already October 2011 has been published which is also cover july 2011
I have referred Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (July 2011) (Doc ID 1315202.1)
Also see:
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
Part:
Oracle E-Business Suite Release 12, versions 12.0.6, 12.1.2, 12.1.3 and Oracle Database 11g Release 1, version 11.1.0.7
1) Is it necessary to apply CPU for Oracle E- Business Suite when your business is running fineYes its strongly recommended
2) In the above metalink doc i came across oracle fusion middle ware , please correct me is it appl tech stack component or is appl tech also call what is the difference between Oracle Fusion Middleware and Oracle Apps Tech StackUse below links for appstier
Also see:
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
Part:
Oracle E-Business Suite Release 12, versions 12.0.6, 12.1.2, 12.1.3 and Oracle Database 11g Release 1, version 11.1.0.7
3) Will CPU Patch boost the performance (as purging of log files )Check know issue part
Order of Applying :
1st Db --
a) how to apply ???
b) i have never applied any db patch till now :( ..
c) what is the estimated time to apply the patch Check readme part of patch be sure you have valid oracle_home and datafile backup
>
2nd Apps - how to apply ??
1) is it same as traditional one using adpatch utility
2) Will this create any INVALID ObjectCheck readme part of patch be sure you have valid oracle_home and datafile backup
regard
Helios

Not receiving Critical Patch Update E-mail Notification Alerts - used to

I am no longer receiving the Security Alert Email Notifications for the Oracle Critical Patch Updates. Also, the instructions on the OTN web page are no longer valid (no longer a Opt-In category). I have the box checked to receive the emails, but for some reason they are no longer being sent. I have checked my "Junk and SPAM" mail folders - not there and they are not being filtered by our company email program. I have a non-technical SR opened with support, but they are not understanding the issue.
On the
http://www.oracle.com/technetwork/topics/security/alerts-086861.html#SecurityAlerts page, there is a link (Click here for instructions on how to configure email notifications.) which takes you to
http://www.oracle.com/technetwork/topics/security/securityemail-090378.html
This is the URL that we go to to setup or subscribe to Critical Patch Update Alert emails
Subscribe to Critical Patch Update Alert E-mails
When going to my account, there is no longer the the Opt-in to Oracle Communications section
I have
Subscription Center (Under Subscription Center is)
Oracle Technology News (under Oracle Technology News is a checkbox for)
Oracle Security Alerts - Get the latest Security Alerts issued by Oracle as they become available.
This box is checked and has been for a very long time, but stopped getting the emails. I am not the only DBA who is having this issue where I work - several others have the same problem and it looks like there are more DBA's in the Oracle Community who have same problem
Thanks for any assistance.

Also see this related thread - Please help me to get my quarterly CPU alert notification send to me
Srini

Critical patches for oracle enterprise linux

Hello, I'm very new to this so here I go. Where do I go to find out all the critical patches there are for oracle enterprise linux. Please provide the link, so I can read about all the critical patches. Thanks a million for your time.

Cross post already answered here:
Re: linux critical patches
Sergio

Is a L3 switch able to receive a WAN link? if the WAN circuit presentation is ethernet?

Hi experts,
The question is if a L3 switch is able to receive a WAN link which is Ethernet, at the same way than a router?

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
To add to what Jody has already posted, L3 switches often lack features commonly found on routers. Often such features are WAN related. Jody mentioned one common WAN feature, NAT, but they might also lack certain hardware resources, such as sufficient capacity to take one or more full Internet route tables.
Even when running across MetroE clouds, often LAN L3 switches are still a bit "weak", for such usage, which is why Cisco has a series of MetroE switches.
The forgoing doesn't mean you cannot use a LAN L3 switch, just you need to be careful matching what the switch can do with your WAN feature needs.

Offline critical patch on 10gR2

OMS: 10.2.0.5
Db: 11.2.0.1
Hi,
I would like to use offline critical patch cause my host is behind a proxy.
I downloaded the metacache, and upload them to Grid.
First, i upload all in time, and after, tryed to re-upload them one by one.
All checkbox are green for upload. But when i launch the "REFRESH_FROM_METALINK_JOB", i got an error:
Mode hors ligne. Utilisation du cache de conseils sur les patches critiques.
Détails des données ARU
URL : .../download_seed_data?table=aru_products
La ressource d'URL est introuvable. Cette ressource est obligatoire pour exécuter le travail RefreshFromMyOracleSupport.
The OMS is configured in Offline mode, with a Metadata Dump Directory created, and available
I don't know what to do.
Thanks

I patched OMS with PSU6 --> 10.2.0.5.6
and have to re-upload metadata.
now it work...

Hi Critical Patch Update CPU January,

Our oracle database 10.2.0.4 on windows 32 bit ...I need to apply the patch from Critical Patch Update (CPU) January 2012,
I searched in metalink I am unable to find the exact patch no.Please anybody tell me patch no...I am sorry about my english

Hi Srini,
I have on more question ,We have rman full backup in tape,Application people (Infractrure manager) have doubt backup is valid or not,,,So He is telling create one database restore the full backup.
Backup contais.
datafiles ,controlfiles,spfile
Please let me know What are the steps I need to take,
May continue this link or create one new thread
Edited by: Pavan L on Mar 14, 2012 11:36 PM

Oracle Critical Patch Update July 2009 for Oracle BEA Releases

Hi All,
Researching in metalink about CPU's for WLS 9.1 I found Oracle Support Note #835668.1. Table 9 of this document
lists minimum product requirements for WebLogic server.
According to this table WLS 9.1 should have a minimum version of 9.2MP3.
I am confident that WLS 9.1 and WLS 9.2 are completely different WLS versions and there is no upgrade path from WLS 9.1 to WLS 9.2.
Is this table misprinted or is it required to replace all WLS 9.1 installations with WLS 9.2 installations?
What is this table trying to indicate?
Please assist.
It would be very helpful.
Thanks.

Oracle Critical Patch Update fix a list of bugs , oracle will release CPU in every three months interval.
you need to click the link which oracle has sent.
then choose your database version===then select the patch number===then on metalink download the patch
with patch there is read me file which tell you how to apply the patch on the database.
Thanks
Regards,
Taj

Lap not joining over a wan link

hi
i have 2 wism running on 6509 chassis and i have access points in remote branches. the lap is not joining the wism. here is the situation:
lap can ping the controllers
lap is getting ip address
option 43 is there on the vlan
dns entry for the wlc is there.
however, when i checked the lap boot: it s getting an ip address and gives the command prompt.
the below debugging on the wlc gives nothing:
debug capwap events
debug capwap errors
debug mac addr <mac addr>
the wan link is private wan running ospf on both routers from each end.
I see no point why this lap is not joining
any idea?

Hi,
According to your description, I understand that all attachments in Outlook are opened slowly since updating Outlook 2003 to 2013. Please confirm whether all users encounter this issue. Also check whether the issue continues in cached mode and in OWA.
Based on your post, I suggest we can try to disable the following add-ins to check whether the issue persists:
Acrobat PDFMaker office com addin
symantec endpoint protection outlook addin
If there is any updates, please feel free to let us know.
Thanks,
Winnie Liang
TechNet Community Support

ALERT - Support for Java Critical Patch Update

ALERT - Support for Java Critical Patch Update
On October 15th, Java released a critical patch update (CPU) which will require download and upgrade to the Java Runtime Environment (JRE) release – 1.7.0_45. If upgrading the JRE to this release, the P6 module (also known as Web Access) of the P6 EPPM product line and the Contract Management product, which utilize LiveConnect applets in the browser, will start generating one or more prompts. To remediate these prompts for the P6 EPPM Web Access module and the Contract Management product, Oracle Primavera will be releasing fixpacks. Until fixpacks become available, you can use the following workaround to suppress these prompts: Select the 'Allow' Prompt or 'Yes' prompt for successful loading of applets. Note: This prompt will occur for each applet.
For more information, please refer to the following KM Documents in My Oracle Support.
For P6 (Web Access), refer to KM Document ID 1591925.1
For Contract Management, refer to KM Document ID 1592535.1

I found the answer to my own question. For any newbies out there, if you create an account with Oracle, that is not enough to download patches. You have to have an Oracle Customer Support Identifier associated with your account. Once you have a CSI that you obtain through your employer who has paid for support or through some other means, you then can go into My Oracle Support and enter a request to be added to the given CSI. That request goes into a pending state until the administrator of the CSI grants you privileges to download patches. (NOTE: You might have to bug someone within your organization to get this to happen.) For me, once I was given the privilege, the link worked as it should.

Cannot Download July 2012 Critical Patch Update for JRockit

All,
I am trying to download:
"Oracle Critical Patch Update Advisory - July 2012", particularly for JRockit. I keep running into what seems to be a database issue on Oracle's side.
The July 2012 Patch informational notes are at:
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
And I am trying to download the Fusion Middleware patch (as JRockit is included in Fusion Middleware, it seems like).
I go to download from the following URL, as stated in the July Patch Release:
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1455387.1
and receive:
Failure of server APACHE bridge:
No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
Appreciate any help.
-Shanti

963860 wrote:
All,
I am trying to download:
"Oracle Critical Patch Update Advisory - July 2012", particularly for JRockit. I keep running into what seems to be a database issue on Oracle's side.
The July 2012 Patch informational notes are at:
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
And I am trying to download the Fusion Middleware patch (as JRockit is included in Fusion Middleware, it seems like).
I go to download from the following URL, as stated in the July Patch Release:
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1455387.1
and receive:
Failure of server APACHE bridge:
No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
---------I can access https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1455387.1 with no issues.
You can access the same link through MOS website https://support.oracle.com -- If you have a valid username/password and CSI number, search for "Doc ID: 1455387.1" and you should be able to see the list of patches in this doc and download it.
Thanks,
Hussein

Synching/Caching Critical Patches across WAN links

Similar Messages

Maybe you are looking for