CSA doesn't allow McAfee update

[bahman.tajkarimi]

Hello Folks,

In our CallManagers and Unity servers, the CSA doesn't allow the McAfee VirusScan get updated. Everytime I need to update the MCafee have to stop the CSA service and update the McAfee. Is there any way that I can ajust the CSA in order to allow the McAfee update?

Thanks,

BT

[tbramwe]

BT:

There is a bug for CSA versions earlier than 4.5.1.655 that prevents McAfee from writing to its log file.

The bug ID is CSCsb85971.

Ths CSA version is headless, which means it cannot be configured manually unless you buy a CSA server and additional agents for the enterprise version.

Hope that helps.

Tom

[bahman.tajkarimi]

The CSA version that we have for the McAfee is VirusScan Enterprise 7.1.0

Thanks

[tbramwe]

That is probably your McAfee version. To check your CSA version go to the toolbar and right-click on the CSA icon, then select 'about'.

A window should appear containing your CSA version information.

[bahman.tajkarimi]

Here's the version is:

CSA V4.0-3 bulid 728

Do I need to upgrade it? If so , how can I do that?

Thanks,

[tbramwe]

I would upgrade. A CCO login is required for access.

http://www.cisco.com/kobayashi/sw-center/telephony/crypto/voice-apps/

The latest version is CSA 2.0(5) which contains policy 4.5.1.655.

That should correct your McAfee issue.

Tom

[bahman.tajkarimi]

Thanks Tom,

Do I need to reboot the server after installing the CSA?

Thanks,

[tbramwe]

Yes, you will.

Usually when changing CSA versions you need to uninstall the old, reboot, then install the new, and reboot.

The service configures itself to start automatically and on restart. Verify these settings just in case.

I you upgrade to McAfee Enterprise v8, check this out for some helpful notes...

http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_bulletin0900aecd800f617e.html

[bahman.tajkarimi]

I have different CCM and unity version in different Clusters. Is CSA CallManager and Unity version dependant? Can I use the new version of CSA in CallManager 3.3 and later and Unity 3.3 and later?

Thanks

[tbramwe]

My rule of thumb is to always reference the compatability matrix first. Then proceed to downloads.

http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/ccmcomp.htm

Go to www.cisco.com and select Tech Support -> software downloads, then select voice products and your CCM or Unity version. Choose the cryptographic software downloads section.

Each product uses a different version of CSA, depending on the policy for the product. Each is written to "know" the expected behavior of the software it is designed for (CCM version, Unity version, etc.).

Select the most current CSA for your voice product (referenced from the compatibility matrix).

Hope that helps.

Tom

[bahman.tajkarimi]

Tom,

The link that you sent me before about upgrading the McAfee to 8.0I was very helpfull. Can I use the same installation procedure for Unity too? Is there any other specific installation procedure for Unity? If so, could you please send me the link. Your help is kindly appreciated.

Thanks,

[tbramwe]

I believe the process is the same. CSA for Unity is a different policy - you can find it here (with CCO login) http://www.cisco.com/cgi-bin/tablebuild.pl/unity3d

I would perform a Unity backup first - if you don't use DiRT, the disaster recovery & restore utility, I would look into it.

http://www.ciscounitytools.com/HelpFiles/CUC/DiRT/index.html

Also, I usually pull a raid drive before making major changes to a production system. You can do it on-the-fly, but I usually power down, pull the mirror, replace with a new disk, then power up. The mirror will take up to 2 hours to repopulate the data, but it's a really good practice just in case. If the upgrade or install fails you can revert the the previous stable system in less time.

Hope that helps out.

Tom