Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSA 5.2.245 and Apache

Hello!

I have some problems with CSA and Apache on RedHat Linux Enterprise ES 4. During the logrotate process CSA denies all connections to Apache and gives the alert such as

May 19 15:15:06 msks0080 CiscoSecurityAgent[3297]: Event: The process '<Unknown:14054>' (as user root(0) group root(0)) attempted to accept a connection as a server on TCP port 80 from 89.175.184.25. The operation was denied.

The process <Unknown:14054> is the apache's child process. I have network access rule that allows apache's child-processes to act as a server on 80/tcp. Then why CSA markes this apache's process as unknown? How can I solve this issue?

1 REPLY
Blue

Re: CSA 5.2.245 and Apache

First of all, I know virtually nothing about UNIX/LINUX.

That being said, is the process running as root and is that normal?

Tom

114
Views
0
Helpful
1
Replies