topic Re: CSA MC 5.2 Rule Exceptions in Network Security

CSA MC 5.2 Rule Exceptions

JayB1rd76 — Sun, 10 Mar 2019 11:58:23 GMT

Having a problem with rule exceptions created through the wizard. We have created several exceptions in a Webserver - Microsoft IIS rule module to allow certain processes. The rules show as enabled but CSA continues to deny the process and log/send out alerts. Any ideas why this would happen? There are several rule exceptions created and none of them seem to work.

Thank you,

Jason

Re: CSA MC 5.2 Rule Exceptions

jan.nielsen — Tue, 27 Apr 2010 21:26:33 GMT

Make sure you do a reset locally on the csa gui, just to be sure. If that doesn't help, you probably didn't get the rule created properly. Can you post the event you still get and the contents of the exception you feel should be catching this ?

Re: CSA MC 5.2 Rule Exceptions

JayB1rd76 — Tue, 27 Apr 2010 23:18:11 GMT

I'm assuming this is the correct way to do this?

Re: CSA MC 5.2 Rule Exceptions

jan.nielsen — Wed, 28 Apr 2010 21:47:06 GMT

Yes, or if you don't have access to the machine it can be done from the host details in the csamc