CSC-SSM denying the "Agent Domain Controller"

[Elvin Arias]

Hello, Cisco Support Community

I have a problem that hopefully youve got and you can help me.

The problem is that we have an ASA with a CSC module doing filtering of FTP, POP3, HTTP, SMTP, the situation is that the communication between the Agent Domain Controller and the CSC fails (or turn extremely slow) very often and when this happens the internet connection becomes extremely slow (sometimes fails completely). We did some testing pointing the agent controller to a server other than the Domain Controller (a PC in the domain) and is not working that bad. Any suggestions?

eeariass@gmail.com

Thanks.

[Kureli Sankar]

That is a good obervation.  I have not heard a member server doing better than a domain controller when the ID Agent installed on it.

Troubleshooting IDAgent latency issues can be tricky.  I'd suggest to open a case with TAC so, they can investigate this better.

1. How big is the network - total number of PCs that are getting scanned via the CSC?

2. How man DCs?

3. This member server or PC and the CSC - are they in the same subnet?

-KS

[Elvin Arias]

Hi, Poonguzhali Sankar

Here are the answers:

1- Arround 300 PC's in the network are being scanned by the CSC.

2- Two DC's in the network.

3- They are not in the same specific subnet but they can see each other.

Regards