Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

CSAMC exclude backup process (linux)

I can't get CSA to allow our backup process. It fires a block alert whenever it tries to backup the CSA directory files. I've tried to whitelist the application process.

<br />

<br />Here's what I did:

<br />1. Clicked the rule in the alert. (alert.JPG)

<br />2. Modified the rule to say "ALL Processes" "But Not Processes in Site_Linux_trusted"

<br />3. Created Site_Linux_Trusted to include $Site_Unix_Whitelist. (AppClass.JPG)

<br />4. Created $Site_Unix_Whitelist to include the directory and processes for 'bpbkar'. (variable.JPG)

<br />

<br />Not sure what I've missed.

<br />

<br />Thanks

<br />

<br />

<br />

<br />

<br />1) alert.JPG - alert.JPG bpbkar process

<br />2) AppClass.JPG - AppClass.JPG

<br />3) variable.JPG

<br />

128
Views
0
Helpful
0
Replies
CreatePlease to create content