Hi. I have a new implementation of CSA 6 (no prior version). One one computer (so far), a Windows XP Pro system, when the CSA Agent is installed and running, the computer is essentially crippled. Logins to the network take minutes, some network shared drives are inaccessible, and the system performs sluggishly.
With the agent disabled, the symptoms usually go away, but not always. With the agent uninstalled, the symptoms are not present.
I have read a fair amount on this being an issue in older version, and that the Network Shim is at fault. I don't see that as an option in the CSA 6 deployment, to choose whether or not the Network Shim is installed.
I have the Windows Firewall disabled and there are no AV programs installed on the system (other than CSA's ClamAV component).
Nothing significant. We have our configuration tuned way down at this point, almost to the point where all systems are in Audit Mode. They're not actually in Audit Mode, but most Priority Deny actions have been tuned out to Allow actions.
Our reasons for that are our own, I won't go into detail as to why we have done this. Suffice it to say, this host mainly has entries in the MC related to our stopping the CSA Agent on the host for testing, records of the installation of the Agent, and some UDP entries of my host trying to accept a connection as a server from another device (which was not blocked).
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...