About Oliver_Kuley

Oliver_Kuley · 05-19-2008

Cisco ist advertising the CSA as part of a PCI compliance solution. I've seen a screenshot of several PCI rule modules for CSA 5.2, which I don't have in my management. Is that a special version of CSA for POS systems (and an additional license) or a...

Oliver_Kuley · 05-19-2008

Does anyone know when there will be an update for the CSA 5.2, now that CSA 6 is around the corner? Or has anyone run into problems with SP3, which is marked as unsupported in the management?

Oliver_Kuley · 01-29-2008

I wish to be able to check registry settings on remote computers on my LAN. All the tools that I've checked so far, trigger a rule in the System Hardening Module: "Attempts to write registry sets All Registry Keys [V5.2 r238] by processes in applicat...

Oliver_Kuley · 01-07-2008

CSA triggers with one of the pre-configured rules, when WgaTray.exe tries to scan a host. WGA is Microsofts Windows Genuine Advantage, which we got with Windows Update some time ago. I could create an exception for that, but what if I'd like the CSA ...

Oliver_Kuley · 06-03-2008

In this PDF you can see the rule modules in CSA 5.2:http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5707/ps5057/product_at_a_glance0900aecd80704fcb.pdfPerhaps it has never been released.

Oliver_Kuley · 03-26-2008

Hi Tom, I'm using both the CSA 5.2.238 and a Novell Client 4.91 (and maybe some other versions on clients). I've never seen any problem with the logon that I could pin on the CSA. -Oliver

Oliver_Kuley · 01-08-2008

Hi Tom, thanks for the help. Looks like I failed to make the last step. The rule is a System API control rule (186 in my installation of v5.2), "Network Applications, Access system functions from a buffer". The action is "Query user", defaulting to "...

Oliver_Kuley · 01-07-2008

Thanks, but that doesn't help. A Deny rule will always be below any Terminate Process rules. I guess a Terminate Process action will always result in a dump and that will prompt a log entry.

Member Since	‎06-14-2007 04:43 AM
Date Last Visited	‎08-18-2017 03:56 AM
Posts	8
Total Helpful Votes Received	9

User Statistics

User Activity

CSA 5.2 PCI Compliance Rule Modules

CSA 5.2 Windows XP ServicePack 3 unsupported OS

CSA 5.2 Read registry on remote Hosts with CSA

CSA: Log stop possible when action is Terminate Process

Re: CSA 5.2 PCI Compliance Rule Modules

Re: Anyone out there using CSA 5.2 and the Novell 4.9 client

Re: CSA: Log stop possible when action is Terminate Process

Re: CSA: Log stop possible when action is Terminate Process