joshrockvm Tue, 06/19/2007 - 03:18

This will solve the pop-ups for blocks but what about queries? I still need the user to have the ability to answer a query.

tsteger1 Mon, 06/25/2007 - 09:15

The only way I've seen to do this (other than registry mods) is to not run okclient.exe.

No CSA flag in the system tray but users still get queries for rules that use them.

The shortcut is located in C:\Documents and Settings\All Users\Start Menu\Programs\Startup.

Priveon Blog has a nice selection of articles on CSA:


pmccubbin Mon, 06/25/2007 - 12:15


You were holding out on us. (Just kidding!)

Thanks for the link to a very informative blog.

This blog rates a 5 from us techies here on the East Coast.



tsteger1 Mon, 06/25/2007 - 12:43

Thanks Paul..

East Coast is where I'm from (Cocoa Beach, Florida) and I want to be there again...

I jealous and tired of the rain....


Jagdeep Gambhir Mon, 06/25/2007 - 06:36

Hi Josh,

If you want to turn off pop up message on the client, then right click on the red flag agent flag at the right corner of your computer screen), you will see the option : "Disable balloon messages". Click on that option.


You can disable them directly on the registry key of the client.

This will disable balloon popups:

HKEY_CURRENT_USER\Software\Okena\Cisco Security Agent\


Hope that helps !



Note : If that helps then please mark this thread as resolved, so that others can benefit from it.

joshrockvm Mon, 06/25/2007 - 06:39

That is helpful but I need to do it globally from the MC if that is possible.

Jagdeep Gambhir Mon, 06/25/2007 - 07:05

Hi ,

The document linked below describes how to limit user interaction with the Agent by disabling the "Agent UI control" rule.

It says: " If the Agent UI control rule is not present (available on Windows and Linux only)

for the system group, no agent UI appears on the end user system."

If you choose to enable this rule, you can still fine tune the level of interaction available to the user.




This Discussion