Automated installations/updates and CSA

[efink]

Hello !

I'm getting a little bit tired of tunning my CSA rules everytime some new processes or actions are discovered. Let me explain: we're using MS SMS server for deploying software and windows updates, then we have McAfee AV server who is updating agents on PCs and then here is ScriptLogic with its funcionality of pushing various settings to different users. My problem (hope I'm not the only one) is that processes from this servers which need higher privileges to install what they have to are changing and is dificult to follow it. Has anyone any suggestion how to cope with it ? Is it possible to have some group of servers that you allow them to have no restrictions (for example by IP address) ?

Thanks in advance

[tsteger1]

I am told that CSA 4.5 will have this feature. I eagerly await it.

I created a group called Admin servers that are IP addresses trusted by every host. I also installed CSA on the servers to keep them honest. It works to limit all but global events.

Is that what you're after?