CSA V4.5.1. B616On just a few nodes (no real pattern that we folk) the "Cisco Security Agent" service will NOT restart after a reboot (Yes, it's set to auto, etc).. The strange part, after the boot is done, and one logs in - the OKClient.exe flag st...

CSA V4.5.1 B616.. We're seeing a fair number of the following alerts:Alert The process '<remote application>' (as user DomainName\SomeUser) attempted to access the registry key '\REGISTRY\MACHINE', value ''. The attempted access was an open (operati...

Running CSA V4.5.1 B616 - We're seeing lots of alerts like the following: TESTMODE: The process 'System' (as user NT AUTHORITY\SYSTEM) attempted to communicate with x.x.x.x on TCP port 139. The attempted access was to accept a connection as a server ...

As Cisco CSA license charges are signficantly different from between server and client agents, we need a method, report, SQL query to be able to determine the number servers and number clients used in a given group. This is to allow internal "charge...

As Cisco CSA license charges are signficantly different from between server and client agents, we need a method, report, SQL query to be able to determine the number servers and number clients used in a given group. This is to allow internal "charge...