For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kreggz_40857's avatar
kreggz_40857
Icon for Nimbostratus rankNimbostratus
Jun 23, 2010

Advanced HTTP Monitor

Hey, We are implementing eBusiness Suite (Oracle Financials) and I need a good GET string to check that our web servers are working correctly. I am not keen on a standard GET /. Does anyone have any suggestions on a URL which doesn't include dynamically generated strings etc?
oracle
partner

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 25, 2010
    If you don't find anything better, you might try a request to see if the login page for the application returns a 200. You can check what request a browser sends for this URI using a header logging addon like HttpFox for Firefox or Fiddler for IE.

     

     

    Aaron
  • kreggz_40857's avatar
    kreggz_40857
    Icon for Nimbostratus rankNimbostratus
    Jun 29, 2010
    Hey,

    As Chris said if you GET the login page you receive a 302. I had to get something implemented pretty quickly (before any of your responses) so I used 

     /OA_HTML/RF.jsp?function_id=28804&resp_id=-1&resp_appl_id=-1&security_group_id=0„Äà_code=US&params=

    If the database is not up the login page doesn't display. I also got the F5 to check for a text file in Apache so that the server guys could do their own changes without requiring us manually bring nodes down on the F5s.

    I was speaking to someone in Oracle today and they were happy for me to use the above URL. The only caveat is that schema change may kill it, however we have test environments so this will be picked up early. I was also told that in other deployments they have actually logged into the EBS portal as just checking the login page does not fully guarantee that the app is up.

    Here is the URL suggested for auto login: 

    /OA_HTML/fndvald.jsp?username=sysadmin&password=sysadmin_password

    Thanks for all your responses.

    Cheers,

    kreggz