Cisco Security Agent (CSA) blocking ping & Ciscoworks

Answered Question
Jun 28th, 2007

Cisco Security Agent is installed on most windows machine and I see some troubleshooting tools fail because pings tends to get blocked from time to time(when there are many ping targets)

Does Cisco Advise agains having CSA installed on the Cisoworks Machine?

Anybody have had problems with DFM and CSA?

Cheers,

Michel

I have this problem too.
0 votes
Correct Answer by tsteger1 about 9 years 5 months ago

Hello Michel

I got this complaint from the network folks when we first deployed CSA.

I unchecked "Cloak system (prevent unauthorized port scans)" and "Block dangerous ICMP messages" in the Network Shield rules for all hosts in order to use network troubleshooting tools.

HTH

Tom

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
tsteger1 Fri, 06/29/2007 - 12:18

Hello Michel

I got this complaint from the network folks when we first deployed CSA.

I unchecked "Cloak system (prevent unauthorized port scans)" and "Block dangerous ICMP messages" in the Network Shield rules for all hosts in order to use network troubleshooting tools.

HTH

Tom

miheg Sun, 07/01/2007 - 23:45

Thanks Tom,

I will follow up on this with the people that control the CSA agent settings.

I hope I can convince them to change the policy.

Other people here tell me that it can't be the agent because I haven't seen a pop up the the agent apparently always shows whenever it blocks something.

Cheers,

Michel

Actions

This Discussion