Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CSA doesn't allow McAfee update

Hello Folks,

In our CallManagers and Unity servers, the CSA doesn't allow the McAfee VirusScan get updated. Everytime I need to update the MCafee have to stop the CSA service and update the McAfee. Is there any way that I can ajust the CSA in order to allow the McAfee update?

Thanks,

BT

11 REPLIES
Bronze

Re: CSA doesn't allow McAfee update

BT:

There is a bug for CSA versions earlier than 4.5.1.655 that prevents McAfee from writing to its log file.

The bug ID is CSCsb85971.

Ths CSA version is headless, which means it cannot be configured manually unless you buy a CSA server and additional agents for the enterprise version.

Hope that helps.

Tom

New Member

Re: CSA doesn't allow McAfee update

The CSA version that we have for the McAfee is VirusScan Enterprise 7.1.0

Thanks

Bronze

Re: CSA doesn't allow McAfee update

That is probably your McAfee version. To check your CSA version go to the toolbar and right-click on the CSA icon, then select 'about'.

A window should appear containing your CSA version information.

New Member

Re: CSA doesn't allow McAfee update

Here's the version is:

CSA V4.0-3 bulid 728

Do I need to upgrade it? If so , how can I do that?

Thanks,

Bronze

Re: CSA doesn't allow McAfee update

I would upgrade. A CCO login is required for access.

http://www.cisco.com/kobayashi/sw-center/telephony/crypto/voice-apps/

The latest version is CSA 2.0(5) which contains policy 4.5.1.655.

That should correct your McAfee issue.

Tom

New Member

Re: CSA doesn't allow McAfee update

Thanks Tom,

Do I need to reboot the server after installing the CSA?

Thanks,

Bronze

Re: CSA doesn't allow McAfee update

Yes, you will.

Usually when changing CSA versions you need to uninstall the old, reboot, then install the new, and reboot.

The service configures itself to start automatically and on restart. Verify these settings just in case.

I you upgrade to McAfee Enterprise v8, check this out for some helpful notes...

http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_bulletin0900aecd800f617e.html

New Member

Re: CSA doesn't allow McAfee update

I have different CCM and unity version in different Clusters. Is CSA CallManager and Unity version dependant? Can I use the new version of CSA in CallManager 3.3 and later and Unity 3.3 and later?

Thanks

Bronze

Re: CSA doesn't allow McAfee update

My rule of thumb is to always reference the compatability matrix first. Then proceed to downloads.

http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/ccmcomp.htm

Go to www.cisco.com and select Tech Support -> software downloads, then select voice products and your CCM or Unity version. Choose the cryptographic software downloads section.

Each product uses a different version of CSA, depending on the policy for the product. Each is written to "know" the expected behavior of the software it is designed for (CCM version, Unity version, etc.).

Select the most current CSA for your voice product (referenced from the compatibility matrix).

Hope that helps.

Tom

New Member

Re: CSA doesn't allow McAfee update

Tom,

The link that you sent me before about upgrading the McAfee to 8.0I was very helpfull. Can I use the same installation procedure for Unity too? Is there any other specific installation procedure for Unity? If so, could you please send me the link. Your help is kindly appreciated.

Thanks,

Bronze

Re: CSA doesn't allow McAfee update

I believe the process is the same. CSA for Unity is a different policy - you can find it here (with CCO login) http://www.cisco.com/cgi-bin/tablebuild.pl/unity3d

I would perform a Unity backup first - if you don't use DiRT, the disaster recovery & restore utility, I would look into it.

http://www.ciscounitytools.com/HelpFiles/CUC/DiRT/index.html

Also, I usually pull a raid drive before making major changes to a production system. You can do it on-the-fly, but I usually power down, pull the mirror, replace with a new disk, then power up. The mirror will take up to 2 hours to repopulate the data, but it's a really good practice just in case. If the upgrade or install fails you can revert the the previous stable system in less time.

Hope that helps out.

Tom

142
Views
8
Helpful
11
Replies