topic Re: CSA event Message in Network Security https://community.cisco.com/t5/network-security/csa-event-message/m-p/374567#M96641 <HTML><HEAD></HEAD><BODY><P>It means that you have some application which is trying to change csa files. Due to that you are hitting the agent self-protection rule and this alarm is being logged. Do you know which application is it? Do you have any other side effects from this alarm? If not and if its annoying for you, you can try to disable the alarm to be logged. In the csamc if you go to: </P><P></P><P>Configuration/Policies/Required Windows System Module and select Rule Agent Service Control at the bottom you</P><P>have the option to select for which applications you don't want alarm to be logged. The services.exe is the Windows Service Control Manager application.</P><P></P></BODY></HTML> Tue, 05 Apr 2005 14:42:23 GMT mchin345 2005-04-05T14:42:23Z CSA event Message https://community.cisco.com/t5/network-security/csa-event-message/m-p/374566#M96639 <P>Has anyone seen this type of messages before? it is occurring a ISA server</P><P></P><P>The program 'C:\WINNT\system32\services.exe' (as user NT</P><P>AUTHORITY\SYSTEM) is trying to modify a Cisco resource file C:\program files\Cisco\CSAgent\bin\agentinfo.exe</P><P></P> Sun, 10 Mar 2019 09:21:44 GMT https://community.cisco.com/t5/network-security/csa-event-message/m-p/374566#M96639 owensgl 2019-03-10T09:21:44Z Re: CSA event Message https://community.cisco.com/t5/network-security/csa-event-message/m-p/374567#M96641 <HTML><HEAD></HEAD><BODY><P>It means that you have some application which is trying to change csa files. Due to that you are hitting the agent self-protection rule and this alarm is being logged. Do you know which application is it? Do you have any other side effects from this alarm? If not and if its annoying for you, you can try to disable the alarm to be logged. In the csamc if you go to: </P><P></P><P>Configuration/Policies/Required Windows System Module and select Rule Agent Service Control at the bottom you</P><P>have the option to select for which applications you don't want alarm to be logged. The services.exe is the Windows Service Control Manager application.</P><P></P></BODY></HTML> Tue, 05 Apr 2005 14:42:23 GMT https://community.cisco.com/t5/network-security/csa-event-message/m-p/374567#M96641 mchin345 2005-04-05T14:42:23Z