Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSA Event Message about CSA AV Scan

Hello, I am getting a lot of information messages that is generated when my CA eTrust A/V does a daily scan of a server that CSA 6.0 is installed on.

The message regarding rule # 589 says inpart... "will set file trust status as Untrusted (until CSA AV scan) if the attempt is allowed. No events will be logged when the rule is triggered."

Since I use CA eTrust how can/do I let the CSA know the scan was done and it is OK and there is no need to generate this event (roughly 4000 events per scan)

Thanks

1 REPLY
Blue

Re: CSA Event Message about CSA AV Scan

You need to create a comparable rule that sets the CA eTrust AV scan as trusted and either add it to the module that triggered the rule or to an exception module.

You should be able to use the wizard to create it and then check it to ensure it isn't too broad.

Tom

262
Views
0
Helpful
1
Replies
CreatePlease to create content