Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
CSA V4.5.1. B616On just a few nodes (no real pattern that we folk) the "Cisco Security Agent" service will NOT restart after a reboot (Yes, it's set to auto, etc).. The strange part, after the boot is done, and one logs in - the OKClient.exe flag st...
CSA V4.5.1 B616.. We're seeing a fair number of the following alerts:Alert The process '<remote application>' (as user DomainName\SomeUser) attempted to access the registry key '\REGISTRY\MACHINE', value ''. The attempted access was an open (operati...
Running CSA V4.5.1 B616 - We're seeing lots of alerts like the following: TESTMODE: The process 'System' (as user NT AUTHORITY\SYSTEM) attempted to communicate with x.x.x.x on TCP port 139. The attempted access was to accept a connection as a server ...
As Cisco CSA license charges are signficantly different from between server and client agents, we need a method, report, SQL query to be able to determine the number servers and number clients used in a given group. This is to allow internal "charge...
As Cisco CSA license charges are signficantly different from between server and client agents, we need a method, report, SQL query to be able to determine the number servers and number clients used in a given group. This is to allow internal "charge...
OK - I think I've got the idea here.. My only question is will this work with "strictly remote" clients??Aka - Unprivileged/non-admin Bob is logged in doing his job on a machine with CSAAnd I (Mr Admin) want to remotely "touch" his machines registry...
I know it's somewhat bad form to reply to one's own post - But perhaps someone else is struggling with a similiar issue..Anyways, we tried every "possibility" related around file & print shares as it pertained to "Null Sessions" (authenicated in doma...
Looks good - It's CSA V4.5.1 B616 - I'm digging aound to find "access" as us user/password to the SQL instance - Remember that admin password during the install? Well I don't.. But I'm sure we can "get in" (that's what DBAs are for, right?). I had...
