CSA MC 5.2 Rule Exceptions

Unanswered Question
Apr 26th, 2010

Having a problem with rule exceptions created through the wizard. We have created several exceptions in a Webserver - Microsoft IIS rule module to allow certain processes. The rules show as enabled but CSA continues to deny the process and log/send out alerts. Any ideas why this would happen? There are several rule exceptions created and none of them seem to work.

Thank you,

Jason

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jan.nielsen Tue, 04/27/2010 - 14:26

Make sure you do a reset locally on the csa gui, just to be sure. If that doesn't help, you probably didn't get the rule created properly. Can you post the event you still get and the contents of the exception you feel should be catching this ?

jan.nielsen Wed, 04/28/2010 - 14:47

Yes, or if you don't have access to the machine it can be done from the host details in the csamc

Actions

This Discussion