https://community.cisco.com/t5/network-security/csa-5-2-245-and-apache/m-p/993680#M79953 <P>Hello!</P><P>I have some problems with CSA and Apache on RedHat Linux Enterprise ES 4. During the logrotate process CSA denies all connections to Apache and gives the alert such as</P><P>May 19 15:15:06 msks0080 CiscoSecurityAgent[3297]: Event: The process '&lt;Unknown:14054&gt;' (as user root(0) group root(0)) attempted to accept a connection as a server on TCP port 80 from 89.175.184.25. The operation was denied.</P><P>The process &lt;Unknown:14054&gt; is the apache's child process. I have network access rule that allows apache's child-processes to act as a server on 80/tcp. Then why CSA markes this apache's process as unknown? How can I solve this issue?</P> Sun, 10 Mar 2019 11:07:15 GMT asafanasjeva 2019-03-10T11:07:15Z https://community.cisco.com/t5/network-security/csa-5-2-245-and-apache/m-p/993680#M79953 <P>Hello!</P><P>I have some problems with CSA and Apache on RedHat Linux Enterprise ES 4. During the logrotate process CSA denies all connections to Apache and gives the alert such as</P><P>May 19 15:15:06 msks0080 CiscoSecurityAgent[3297]: Event: The process '&lt;Unknown:14054&gt;' (as user root(0) group root(0)) attempted to accept a connection as a server on TCP port 80 from 89.175.184.25. The operation was denied.</P><P>The process &lt;Unknown:14054&gt; is the apache's child process. I have network access rule that allows apache's child-processes to act as a server on 80/tcp. Then why CSA markes this apache's process as unknown? How can I solve this issue?</P> Sun, 10 Mar 2019 11:07:15 GMT https://community.cisco.com/t5/network-security/csa-5-2-245-and-apache/m-p/993680#M79953 asafanasjeva 2019-03-10T11:07:15Z https://community.cisco.com/t5/network-security/csa-5-2-245-and-apache/m-p/993681#M79960 <HTML><HEAD></HEAD><BODY><P>First of all, I know virtually nothing about UNIX/LINUX.</P><P></P><P>That being said, is the process running as root and is that normal?</P><P></P><P>Tom</P><P></P></BODY></HTML> Thu, 22 May 2008 16:35:19 GMT https://community.cisco.com/t5/network-security/csa-5-2-245-and-apache/m-p/993681#M79960 tsteger1 2008-05-22T16:35:19Z