Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSA 4.x blocking but no wizard available

The issue I'm having is the help desk is using goto assist. csa is showing a warning and blocking. normally there is a wizard tab after the rule that was triggered. that i usually run to allow a application to run. so now instead i went into the rule "rule 1012 Trojan detection) and go to the area with check box (accessing system functions from code executing in data or stack space) and then i highlight a application class to exclude and then i goto that application class file set and add the executable that give the error. In theory it should work am i missing something

Thanks for any help

Jim2k

3 REPLIES
Blue

Re: CSA 4.x blocking but no wizard available

That should unless something else is superceding it.

My CSA 4.x is a bit rusty but I recall creating application classes for each of the Trojan Detection categories and adding executables to those when I wanted them to be ignored.

Tom

New Member

Re: CSA 4.x blocking but no wizard available

so far i tried adding the executable to an application class and then execluding that class in the rule. i also tried creating a new App class and excluding that. any other ideas

Blue

Re: CSA 4.x blocking but no wizard available

The wizard will create an exception that is a separate trojan detection rule so you may want to look and see if there is more than one rule.

It may also stop presenting the wizard if there was already an exception created.

It's been a while since I used 4.x but I remember that particular rule being difficult to manage.

Tom

109
Views
0
Helpful
3
Replies