Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm searching all over Cisco.com for information on installing CSA 5.1 agent on Microsoft Clusters with Teamed Broadcom NICs, but I can't find any information other than "this is supported" in the installation guide.Does anyone know if there is a pro...
Suppose I want to configure a policy that will allow a user to download and execute .exe and .msi files. Of course, I cannot list all of the files that should be allowed to execute since installer executables can have a variety of filenames.The only ...
I am seeing a huge number (almost 1000/day) of attempts to read/write registry keys. This is from random nodes everywhere. When running through the event wizard, I can configure a rule to allow access to those registry keys - the event wizard suggest...
I have several servers with multiple gigabit network cards. I would like to terminate each of these into a physically separate 6500 chassis (for the greatest redundancy) but I would also like both interfaces to be active for sending and receiving dat...
Joe,Do you know exactly what svchost.exe is? For example, if a user opens up windows explorer and double-clicks a file, I'm assuming that file would be a child process of explorer.exe. Is it possible for a user to execute a file as a child process of...
Hey Joe,I agree - I've allowed svchost.exe to run any child applications, essentially extending complete trust to this file. Do you know exactly *how* a child process is run with svchost.exe? Really what I'm trying to discern is whether or not a viru...
Joe,I believe this could also be due to "sloppy code" - the approach I take here is to lock it down and then only allow it if there is an event that we can directly correlate with that action CSA is stopping.What I am seeing is that svchost.exe runs ...
