Cisco Security Agent (CSA) blocking ping & Ciscoworks

Answered Question
Jun 28th, 2007
User Badges:
  • Gold, 750 points or more

Cisco Security Agent is installed on most windows machine and I see some troubleshooting tools fail because pings tends to get blocked from time to time(when there are many ping targets)


Does Cisco Advise agains having CSA installed on the Cisoworks Machine?


Anybody have had problems with DFM and CSA?


Cheers,


Michel



Correct Answer by tsteger1 about 9 years 8 months ago

Hello Michel


I got this complaint from the network folks when we first deployed CSA.


I unchecked "Cloak system (prevent unauthorized port scans)" and "Block dangerous ICMP messages" in the Network Shield rules for all hosts in order to use network troubleshooting tools.


HTH

Tom

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
tsteger1 Fri, 06/29/2007 - 12:18
User Badges:
  • Red, 2250 points or more

Hello Michel


I got this complaint from the network folks when we first deployed CSA.


I unchecked "Cloak system (prevent unauthorized port scans)" and "Block dangerous ICMP messages" in the Network Shield rules for all hosts in order to use network troubleshooting tools.


HTH

Tom

miheg Sun, 07/01/2007 - 23:45
User Badges:
  • Gold, 750 points or more

Thanks Tom,


I will follow up on this with the people that control the CSA agent settings.


I hope I can convince them to change the policy.


Other people here tell me that it can't be the agent because I haven't seen a pop up the the agent apparently always shows whenever it blocks something.


Cheers,


Michel

Actions

This Discussion