Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

CSA registeration with CSA MC help

Hi,

Actually , i installed CSA MC on a server (its name CSAMC.NMEG.Loacl), and i tried to install the CSA on a group of servers .

The CSA MC and these servers are in the same domain. One of these servers (its name EG-NMEG-BACKUP.NMEG.LOCAL)

is registered with the CSA MC but there is an event regarding to this server in the event log.

Also there are some events regarding to DNS server (10.192.64.2) and DHCP server(10.192.64.3)

what does these events mean????

Please find the attached file for the event log.

best regards

Mohamed

2 REPLIES
Silver

Re: CSA registeration with CSA MC help

TCP port 139 corresponds to Netbios session service which is normally meant for computer in a domain, That is not working for this computer.

Community Member

Re: CSA registeration with CSA MC help

... and udp 123 is of course NTP - so this server seems to be your time server.

for the smhstart.exe:

"Command: C:\hp\hpsmh\bin\smhstart.exe

Description: The HP System Management Homepage is a web-based interface that consolidates the infection retrieve by the other Insight agents running on the server."

so it seems the exe is collecting data on your server about processes etc.

best regards

juergen

127
Views
0
Helpful
2
Replies
CreatePlease to create content