CSA : White List Application always blocked : LMS

connect101 · ‎01-07-2009

Hi,

I have a LMS where i've installed a CSAgent.

When I use the LMS the CSA block applicationns like java, cmd. It use the rule [555].

So I've followed the wizard and these applications are now trusted and are in the White List.

But when I come back to the LMS, the application is still blocked.

What can be the mismatch.

Is ther any issue?

Thak you.

jan.nielsen · ‎01-23-2009

I believe you have to reset the untrusted application on the agent on the server, either from CSAMC Host details page, or manually in the agent gui on the server. I would however not just make them whitelisted, it gives them way to many rights they don't need and ruins the whole concept of CSA, the reason those apps are firing, is because the ruleset is wrong for that server, you should really create more strict policies for this, other than just doing whitelists.