Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
After the Cisco CallManager server 4.2(3) is rebooted, the CSA Alert dialog box reads: "A problem was detected. Are you modifying the IIS server or system configuration? If not, this operation is suspicious."
In this case, the security log shows this error:
The process 'C:\WINNT\system32\inetsrv\inetinfo.exe' (as user NT AUTHORITY\SYSTEM) attempted to access 'C:\Program Files\Cisco\WebKnight\Loaded.xml'. The attempted access was a write (operation = OPEN/WRITE).
This issue occurs with Cisco CallManager 4.2(3) and Cisco Security Agent (CSA) version 2.0(5)(V4.5-1 build 655).
It is most likely a result of the fix provided for Cisco bug ID CSCsb68657.