I have been testing the upgrade from CSA v5.2.0210 to v5.2.0326. I have multiple machines that according to the logs were successful, but once I reboot the PC the computer crashes.
I found in the application event log that csauser.dll caused a fault in explorer.exe which would explain the system crash. The only way I can restore the PC is to boot in safe mode and either rename the csauser.dll or completely uninstall CSA.
After the uninstall I attempt to reinstall with 326 and have the same result. If I uninstall and reinstall with 210 there is no crash, but I will have a version mismatch between MC and csa agent.
Has anyone experienced a similar problem with any resolution?
I meant 238. I have tried going from 225 to 238 as well and am experiencing the same problem. I do have on machine that is working properly with the csauser.dll module failure, but I am not sure what the difference is.
I also am trying to use a builder appclass rule to add any application that accesses either explorer or csauser.dll to be added to the dynamic app
Sorry for the delayed response. I had to open a TAC ticket because I could not figure out if a subprocess was causing csauser.dll to crash explorer.
I sent them a kernel memory dump. Because the crash did not officially create a Blue Screen of Death I was forced to manually create one. This is something new I learned and very useful to analyze code. It works with Win 2k,XP, and Server 2000/2003. This is only available to PC's that have a PS2 connected keyboard. For usb keyboards you will have to request a hotfix from microsoft:
To enable this features, you'll need to edit registry and reboot the computer after edit.
Once that was done, I sent my dmp to Cisco and they found that it was caused by an explorer launched process that monitored printer usage. The software is called Print Audit 5. I created a kernel protection exception rule for that process and now everything works normally. I hope the above registry entry can help anyone else who is experiencing any type of crash with csa in order to pinpoint the underlying process
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...