Decrypting NAC appliance agent event logs

Peter Yardley · ‎10-27-2008

Talking about the Mac NAC agent the CAM config guide says...

'The Log file (~/Library/Application Support/Cisco Systems/CCAAgent/event.log) is encrypted. The user must use the decryption tool on Windows to see the log in clear text.'

Does any one know what decryption tool they are talking about.

ciscoforumuser · ‎10-29-2008

I think Cisco support has that tool and may not be available for public.

flitcraft33 · ‎10-29-2008

I was told by TAC that logs are encrypted to prevent shared secrets and the like being taken and ONLY TAC persons have the decrypter. I have no idea if that applies here or is even necessarily true, but it's what I was told. So I would contact TAC and upload the log.

Peter Yardley · ‎10-29-2008

Thanks for that, guess I'll have to log a TAC request and Cisco need to update their doco.