Hello MR. Andrew,
Please try the following where I have experienced the same problem On the Server Sensor machine: 1. Stop the issDaemon service. 2. Rename the current.policy file to current.old in the \Program Files\ISS\issSensors\ directory. 3. Start the issDaemon service. In SiteProtector Console: 1. Wait for the Sensor to become ACTIVE. 2. Apply the policy you desire. Regards, Abdulkareem M. Al-Raie SSCP,ISS-CE Information Security Consultant Elite Computer Solutions P.O. Box: 58915 Riyadh, 11515 Kingdom of Saudi Arabia http://www.elite.com.sa <http://www.elite.com.sa/> Tel.: + (966 1) 4086504 Mobile: +966 (50) 4496521 ________________________________ From: [EMAIL PROTECTED] on behalf of Andrew Plato Sent: Thu 10/6/2005 12:09 PM To: [email protected] Subject: [ISSForum] Server Sensors that just die This is a daunting little problem I have had lately. Server sensors that just croak. They stop working. When you try to restart them, you get an error that the OS cannot find the file specified. Nothing will restart them - rebooting, nothing. The issdeamon is running. Just not the Buffer Overflow / IPS engine. The only fix I have been able to discover is to reinstall SS and start over. Anybody have any info on this? I checked the Knowledge Base on this, but nothing. Also, when is ISS going to put out a new Server Sensor build. I am tired of installing it and then having to go through the whole service pack update. Can't we get a repackage? Oh, and while I am complaining - where the heck is "Proventia Server??!?!?" _____________________________________ Andrew Plato, CISSP President / Principal Consultant ANITIAN ENTERPRISE SECURITY Your Expert Partner for Security & Networking 3800 SW Cedar Hills Blvd, Suite 280 Beaverton, OR 97005 503-644-5656 Office 503-214-8069 Fax 503-201-0821 Mobile www.anitian.com _____________________________________ PGP/GPG public key available at: http://www.anitian.com/corp/keys.htm _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
