Cisco Security Agent (CSA) blocking ping & Ciscoworks

[miheg]

Cisco Security Agent is installed on most windows machine and I see some troubleshooting tools fail because pings tends to get blocked from time to time(when there are many ping targets)

Does Cisco Advise agains having CSA installed on the Cisoworks Machine?

Anybody have had problems with DFM and CSA?

Cheers,

Michel

[tsteger1 · Accepted solution]

Hello Michel

I got this complaint from the network folks when we first deployed CSA.

I unchecked "Cloak system (prevent unauthorized port scans)" and "Block dangerous ICMP messages" in the Network Shield rules for all hosts in order to use network troubleshooting tools.

HTH

Tom

[miheg]

Thanks Tom,

I will follow up on this with the people that control the CSA agent settings.

I hope I can convince them to change the policy.

Other people here tell me that it can't be the agent because I haven't seen a pop up the the agent apparently always shows whenever it blocks something.

Cheers,

Michel