Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

disable CSA flag movement


Is there a way to disable de movement of the red CSA flag when a deny rule applies? We would like to limit the interaction of CSA with the users, but still keep the GUI for query pop-ups.

Of course one way would be to disable logging for the deny rule, but we would like to continue to log these events for some deny rules.

The movement of the CSA flag generates unnecessary calls to our support team.



Re: disable CSA flag movement

Delete the okclient.exe shortcut from the Documents and Settings\All Users\Start Menu\Programs\Startup folder.

This will keep the Agent UI from starting but users will still get a GUI popup for queries.

The downside is if they click no instead of yes for a legit action and their response is cached, you have to clear it from the console.


New Member

Re: disable CSA flag movement

Thanks for the reply. I didn't know this and it is an interesting option. I will consider it if I can't find anything else. But for the reason you mentionned I would prefer to leave the GUI on the desktop and just disable the flag movement. Isn't there a configuration file or reg entry where this could be changed?


New Member

Re: disable CSA flag movement

The README.txt for states this: "CSCeg87151 csa45-pilot: [ENH] Admin config for agent ui to disable flag waving " but I can't find how to accomplish it.

In the 5.2 release notes it states that it is currently and agent-side configuration that is being considered as a server-side feature in a future release.

But I can't find any documentation on the agent-side configuration.


Re: disable CSA flag movement

I founnd this for CSCeg87151



CSA versions has implemented a registry key that can be set to

disble flag waving on the receipt of an event.

1) Stopped the agent service

2) Add to the system's registry

DWORD:: //HKLM/SOFTWARE/Cisco/CSAgent/FlagFlapDuration

3) Exit the agent GUI from the system tray

4) Restart the agent service

5) Restart the agent GUI using the start menu.

Note: The agent will need to restart the agent GUI to pick up this change.

The agent GUI only reads these parameters on startup.

It worked for version 5.2 by leaving the default value at 0.


CreatePlease login to create content