topic Remote Agent issue with ACS 4.2 in Network Access Control

Remote Agent issue with ACS 4.2

vishweswaran.k — Mon, 11 Mar 2019 03:12:57 GMT

Dear All,

We have ACS 4.2.0.124 runnning with remote agent installed on win 2003/32 bit ent server. Now we are facing issue like logs (daily backup) from ACS to the Remote Agent is not happening properly. We usually get logs around 1 MB everyday in remote agent but sometimes we are getting 1 KB continuosly untill the services to be restarted in ACS manually. Any quick help is appreciated.

ACS and Remote Agent, version and patches are same.

Thanks in advance ...

Remote Agent issue with ACS 4.2

Amjad Abdullah — Tue, 19 Mar 2013 09:01:52 GMT

When the remote agent not logging, what is the remote agent service status? is it running? or stopped?

Rating useful replies is more useful than saying "Thank you"

Re: Remote Agent issue with ACS 4.2

Jatin Katyal — Tue, 19 Mar 2013 10:29:57 GMT

Further to Amjad's reply, try to grab CSLOG file from the server running remote agent.

Jatin Katyal

- Do rate helpful posts -

Remote Agent issue with ACS 4.2

vishweswaran.k — Wed, 20 Mar 2013 06:21:23 GMT

we have installed this on appliance. how will i get CSLog ..?

Re: Remote Agent issue with ACS 4.2

Amjad Abdullah — Wed, 20 Mar 2013 07:18:41 GMT

The remote agent logs are saved in the remote agent installation directory (usually in C:\program files\Cisco\CiscoSecure ACS Agent directory). In CSLogAgent\Logs directory.

Rating useful replies is more useful than saying "Thank you"

Re: Remote Agent issue with ACS 4.2

murugananthamamir — Wed, 20 Mar 2013 07:28:23 GMT

Remote Agent issue with ACS 4.2

vishweswaran.k — Wed, 20 Mar 2013 07:44:55 GMT

In CSLog file we are seeing pass and fail status. how to find the miscommunication between acs and remote agent..? any bug which is hitting to this version 4.2 ..?how the logs are stored in remote agent ? what protocol is been used for this communication ? pls help...

Re: Remote Agent issue with ACS 4.2

Jatin Katyal — Wed, 20 Mar 2013 10:42:35 GMT

CSLogAgent is the logging service. CSAgent controls the logging service but receives logging data from appliances directly. When CSLogAgent starts, it requests its configuration from the configuration provider specified in the CSAgent.ini file. After it has received its configuration, it is ready to perform logging services. If CSLogAgent encounters problems receiving its configuration from the configuration provider, it restarts periodically until it succeeds in receiving its configuration.

When a remote agent starts, it reads its CSAgent.ini file to determine which services should be available and which appliance is its configuration provider. Then it contacts the configuration provider and requests its configuration.

Ports—By default, CSLogAgent listens to TCP port 2006 for communication with the configuration provider and on TCP port 2007 for accounting data from any permitted appliance.

What is the full version of ACS appliance? You can check this under system configuration >> appliance upgrade status.

In order to generate some logs on demand.

Go to reports and activities > administration audits > click refresh/reload few times.

From the RA server collect the below listed files.

C:\Program Files\Cisco\CiscoSecure ACS Agent\CSLogAgent\Logs

C:\Program Files\Cisco\CiscoSecure ACS Agent\CSAgent.ini

Jatin Katyal

- Do rate helpful posts -

Remote Agent issue with ACS 4.2

vishweswaran.k — Wed, 20 Mar 2013 11:21:20 GMT

Its running with 4.2.1.15 and patch is 9. In RA also same. We are getting CSLogAgent logs and not seeing any disconnection kind of errors but in Logs directory, like failed attempts, Passed authentication ... n all sometimes not logging properly. means empty notepad with 1KB. CSAgent.ini configs are proper. Any suggestion..?

Re: Remote Agent issue with ACS 4.2

Amjad Abdullah — Wed, 20 Mar 2013 11:25:33 GMT

Nice explanation Jatin

+5 is least thing we can provide.

Regards,

Amjad

Rating useful replies is more useful than saying "Thank you"