cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
541
Views
0
Helpful
1
Replies

CSA Error - not showing in console

jeffnorem
Level 1
Level 1

I get the following error from CSA when I look into the securitylog on the server, but it is not showing up in the CSA console.

When I take the server out of test mode it stops the server from forwarding on my SMTP mail relays. It is the only log in at that time, so I know it is related, I just need to know what rule in CSA to change so this action is allowed..

thanks

2006-05-24 14:14:04.828,Alert, “the process ‘C:\WINDOWS\SYSTEM32\inetsrv\inetinfo.exe’ (as user NT\AUTHORITY\SYSTEM) attempted to communicate with “IP Address” on TCP port 25. The attempted access was to accept a connection as a server (Operation = Accept). The operation was denied. “,”NACL_DENY”,””,”C:\WINDOWS\SYSTEM32\inetsrv\inetinfo.exe”,

1 Reply 1

tsteger1
Level 8
Level 8

Is the rule set to log? I would look for Network Access Control rules in the groups the server belongs to and see which ones are set not to log.

You could also manually create a rule that allows that action to that IP address.

Review Cisco Networking for a $25 gift card