Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSA : White List Application always blocked : LMS

Hi,

I have a LMS where i've installed a CSAgent.

When I use the LMS the CSA block applicationns like java, cmd. It use the rule [555].

So I've followed the wizard and these applications are now trusted and are in the White List.

But when I come back to the LMS, the application is still blocked.

What can be the mismatch.

Is ther any issue?

Thak you.

1 REPLY

Re: CSA : White List Application always blocked : LMS

I believe you have to reset the untrusted application on the agent on the server, either from CSAMC Host details page, or manually in the agent gui on the server. I would however not just make them whitelisted, it gives them way to many rights they don't need and ruins the whole concept of CSA, the reason those apps are firing, is because the ruleset is wrong for that server, you should really create more strict policies for this, other than just doing whitelists.

167
Views
0
Helpful
1
Replies
CreatePlease to create content