CSA MC 5.2 Rule Exceptions

Unanswered Question
Apr 26th, 2010
User Badges:

Having a problem with rule exceptions created through the wizard. We have created several exceptions in a Webserver - Microsoft IIS rule module to allow certain processes. The rules show as enabled but CSA continues to deny the process and log/send out alerts. Any ideas why this would happen? There are several rule exceptions created and none of them seem to work.


Thank you,

Jason

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jan.nielsen Tue, 04/27/2010 - 14:26
User Badges:
  • Gold, 750 points or more

Make sure you do a reset locally on the csa gui, just to be sure. If that doesn't help, you probably didn't get the rule created properly. Can you post the event you still get and the contents of the exception you feel should be catching this ?

JayB1rd76 Tue, 04/27/2010 - 16:18
User Badges:

I'm assuming this is the correct way to do this?


jan.nielsen Wed, 04/28/2010 - 14:47
User Badges:
  • Gold, 750 points or more

Yes, or if you don't have access to the machine it can be done from the host details in the csamc

Actions

This Discussion