cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

261
Views
5
Helpful
5
Replies
Highlighted
Beginner

CSA 5,2.0.238 installed on a Win 2k3 Server

The server that I will be deploying with the CSA Agent, should it only be attached to the Group "Servers - Internally Deployed" or should it be joined to other groups as well? This server is not a file or print server but a will maintain logs so i do want the necessary protection.

Thanks,

Adam

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Yes, I don't clone everything like I did with 4.X.

It makes upgrades and management a lot easier IMHO.

Tom

View solution in original post

5 REPLIES 5
Highlighted
Collaborator

That and "Servers - All types" sounds like a good start.

If you want to protect or audit the logs, you would need to add a few more rules.

Tom

Highlighted

Also, instead of nesting groups and such should I just copy the rules from the "Servers - Internally Deployed" and apply them in the copied Group of "Servers - All Types" ?

Thanks Tom,

Adam

Highlighted

Hi Adam, I think that's a matter of personal preference.

In 5.2, I left pretty much everything at the defaults (unlike what I did with 4.X).

My servers are all in the default servers group and in other groups based on their function.

I move all exceptions into custom exception modules in custom policies and associate them with default groups.

Again, that is my personal preference but there are others that do it differently.

HTH

Tom

Highlighted

so you are pretty much using the default groups and creating your exceptions as needed?

Thanks,

Adam

Highlighted

Yes, I don't clone everything like I did with 4.X.

It makes upgrades and management a lot easier IMHO.

Tom

View solution in original post

Content for Community-Ad