Cisco Unified MeetingPlace Express, Release 2.x -- How to Use the Cisco Security Agent (CSA) to Monitor the System
The Cisco Security Agent (CSA) is an application that provides system and data security and allows you to monitor the activities on your system. The CSA is automatically installed on your system in Cisco Unified MeetingPlace Express Release 2.x. You do not need to install or configure anything. The version of CSA that is included with Cisco Unified MeetingPlace Express is a stand-alone version; therefore, if a newer version of CSA comes out, you must manually update the CSA version on your system. Because this is a stand-alone version, you cannot use the CSA Management Console.
The CSA consists of a set of rules that govern who and what applications can alter or query critical file systems. It also provides security on ports to minimize unauthorized system logins for malicious purposes. The CSA logs violations of any of the security rules. The log can be perused periodically to determine what attempted activities were blocked.
The red flag at the lower right hand corner of the screen indicates that CSA is running and active on your system.
Using the Cisco Security Agent (CSA)
- Log in to the console.
- Right click the red CSA flag in the bottom right. The system displays the CSA agent panel.
- To change the level of security for your system, click System Security. Move the security level slide bar to the new security level. We recommend that you keep the security at medium or high.
- To view the logs, click Status > Messages > View log. You can purge the logs by clicking Purge log but you cannot permanently remove them.
Upgrading to a Newer Version of the Cisco Security Agent (CSA)
- Go to Cisco.com and find the Cisco Security Agent upgrade file. The CSA will be distributed as an RPM file on a CD or as a file download. The naming convention will be similar to CSA_184.108.40.206.
- Save the file to a convenient location.
- From the console, go to the Cisco Unified MeetingPlace Express operating system login page and log in as the user called root.
- Right-click on the desktop and select New Terminal. This brings up the command line.
- Navigate to the directory where you saved the CSA upgrade file.
- Enter -rpm -Uvh CSA_220.127.116.11 to execute the program.
- Note: Enter the actual name of the CSA upgrade file, instead of "CSA_18.104.22.168" which is just an example.