Modify is better. Specifically, uncheck the "Allow user to modify agent security settings" option. In the absence of this rule, end users have no visible agent UI.
Monitor rules simply alert you to an event happening on your agent. For example, you want to know when a file is opened for read. Let's say a file on your server containing HR records. A monitor rule will log that to the CSAMC for your later investig...
- Stop the agent service- Open in notepad: Program file\cisco systems\csagent\cfg\sysvars.cf- Debug=1 (uncomment this token)- Set the highest debug setting: debug=999- Restart the agent serviceDo not forget to take the Agent out of debug of you'll...
The CSAgent-Install.log will show you if any of the shims failed to load during the install. The csalog.txt in the same directory will log communication problems. Look for an error code like one below (cut and pasted from the Networkers 2006 CSA Trou...
