<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic CSA prevents remote application from accessing the registry in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/csa-prevents-remote-application-from-accessing-the-registry/m-p/1338976#M76628</link>
    <description>&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I have recently install CSA 6.01.106 and I am getting the following notification in the event log. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Audit: The process '&amp;lt;remote application&amp;gt;' (as user PROD01\S60MP6I$) attempted to access the registry key '\REGISTRY\MACHINE' and value ''. The attempted access was an open (operation = OPEN/KEY). The operation would have been denied.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;does anyone know how to create an execption without creating a blanket rule to permit everything?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Or are you able to provide me with some more tips to assist me with what is going on here?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;many thanks&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
    <pubDate>Sun, 10 Mar 2019 11:43:36 GMT</pubDate>
    <dc:creator>ivickery</dc:creator>
    <dc:date>2019-03-10T11:43:36Z</dc:date>
    <item>
      <title>CSA prevents remote application from accessing the registry</title>
      <link>https://community.cisco.com/t5/network-security/csa-prevents-remote-application-from-accessing-the-registry/m-p/1338976#M76628</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I have recently install CSA 6.01.106 and I am getting the following notification in the event log. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Audit: The process '&amp;lt;remote application&amp;gt;' (as user PROD01\S60MP6I$) attempted to access the registry key '\REGISTRY\MACHINE' and value ''. The attempted access was an open (operation = OPEN/KEY). The operation would have been denied.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;does anyone know how to create an execption without creating a blanket rule to permit everything?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Or are you able to provide me with some more tips to assist me with what is going on here?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;many thanks&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2019 11:43:36 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/csa-prevents-remote-application-from-accessing-the-registry/m-p/1338976#M76628</guid>
      <dc:creator>ivickery</dc:creator>
      <dc:date>2019-03-10T11:43:36Z</dc:date>
    </item>
    <item>
      <title>Re: CSA prevents remote application from accessing the registry</title>
      <link>https://community.cisco.com/t5/network-security/csa-prevents-remote-application-from-accessing-the-registry/m-p/1338977#M76630</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;You can create a user state that will allow remote connections if it is legitimate.  &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It may be trying to read permissions to connect or run an application.  &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Tom&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 03 Aug 2009 16:52:33 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/csa-prevents-remote-application-from-accessing-the-registry/m-p/1338977#M76630</guid>
      <dc:creator>tsteger1</dc:creator>
      <dc:date>2009-08-03T16:52:33Z</dc:date>
    </item>
  </channel>
</rss>

