Tom, thanks a lot for your response. I have to reserve time in our staging environment so it's taken a few days to get back to this.
When I simply remove the machines from the "Servers - All types" group they remain in the "Systems - Test Mode" group. They also still have the policies "Application Classification" (3 modules) and "Operating System - Base Permissions - Windows" (2 modules). Are you suggesting that I remove these two policies as well?
Also, these are dual NIC machines but each currently has its second NIC disabled (unlike in production).
Ok. To review: the IIS servers had a cpu spike and the sql servers did not.
So: I took the IIS servers out of the "Servers - All Types" group and left them in "Systems - Test Mode."
We still saw the increased cpu utilization (from no-csa = 20% to with-csa = 30%).
One thing I noticed is that once I removed them from any group with policies attached I could no longer run the agent console. The icon even left the system tray.
Now I have removed the servers from the "Systems - Test Mode" group but they now show up as "Test mode: yes" and Send Polling Hint: On (unavailable). I also can't ask the agent to poll because I can't run the agent console. I tried stopping/starting the service but nothing happened.
So, is it true...
-That you must have some policy attached to use the agent console?
-That an agent will never poll again if it has no policies attached?
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :