CSA : White List Application always blocked : LMS

Unanswered Question
Jan 7th, 2009


I have a LMS where i've installed a CSAgent.

When I use the LMS the CSA block applicationns like java, cmd. It use the rule [555].

So I've followed the wizard and these applications are now trusted and are in the White List.

But when I come back to the LMS, the application is still blocked.

What can be the mismatch.

Is ther any issue?

Thak you.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jan.nielsen Fri, 01/23/2009 - 15:01

I believe you have to reset the untrusted application on the agent on the server, either from CSAMC Host details page, or manually in the agent gui on the server. I would however not just make them whitelisted, it gives them way to many rights they don't need and ruins the whole concept of CSA, the reason those apps are firing, is because the ruleset is wrong for that server, you should really create more strict policies for this, other than just doing whitelists.


This Discussion