Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'd like to know when a host stops polling into the CSA MC. Is it possible to create an alert to be sent via email or an SNMP trap when an agent hasn't polled into the MC for a specified period of time?-Mike
I'm currently running CSA 5.2 r238 with all systems in Test Mode. I keep seeing events for certain modules loading after startup, such as pdcrypt2.sys in a Citrix environment. I know these events are normal and don't care to have those events logge...
I have a RHEL3 WS host running Cisco Security Agent Version 5.2.0.225. From time to time I am seeing alerts that don't make sense.For example, see these alerts:TESTMODE: The process '/bin/echo' (as user root(0) group root(0)) attempted to accept a c...
Tom,Good point about 5.0 vs 6.0. I'm hoping to get a test MC spun up in the next few weeks, just don't have anything at the moment.Regarding copying the folder from another machine: Is the Java folder that gets placed in the CSAMC root the same fol...
Tom,We currently only have the one MC and the java directory doesn't exist there. J2SE RE6 is installed on the machine, but it's installation path isn't within the CSAMC root.If I'm reading your response right, I would need to have J2SE RE6 installe...
Could you please be more specific about what was copied where? I am experiencing the same problem but can't recreate your solution. I've called the TAC and their response is to upgrade the MC.-MS
Tom,That worked. I had tried to create an alert using a similar method in the past but I didn't have it configured correctly. This appears to work for my needs.Thanks!-MS
