CSM 4.2

Hi Netpros,

I am to evaluate the software eval of CSM 4.2 90 days. I installed and deployed on a VM environment and turns on a regular basis. I am facing

a small question by discovering a few firewalls. Cisco ASA firewall are discovered and receive events in the event viewer. But I'm unable to receive

all events for 8 PIX worm devices. However, all devices are discovered. Advice or hints of a popular person.

Concerning

Faiz

Sorry, but the CSM 4.2 supports event not with Pix Firewall. Please see the following where this is documented:

http://www.Cisco.com/en/us/docs/security/security_management/cisco_security_manager/security_manager/4.2/compatibility/information/csmsd420.html

Tags: Cisco Security

Similar Questions

  • Satellite Z930 - mode boot Boot CSM and grayed out on the value

    Hello

    Hope someone can help me please.

    I have a Toshiba Ultra Z930 friends book.

    When you start the laptop does not start it comes up with the meesage PXE - E61: Media Test Failure.

    It is a Windows 8 portable 3rd Gen i7.

    I can boot from Hiren'S and the hard drive is located and can be selected and all files seem to be intact.

    I went into the BIOS and found that the startup mode is set to MSC Mode.
    However, Windows 8 requires the for UEFI boot mode.

    I can't find how to change the boot of the CSM Mode in the UEFI.
    The option is grayed out and cannot be selected.

    Help
    Please

    Hello

    Go to the BIOS by pressing F2.
    Then put the BIOS on the default settings, save the changes and power the laptop off.
    Then switch on the device and access to the BIOS, once more the key F2.

    According to my experience, secure boot option must be available, and you should be able to change the startup mode UEFI/CSM layout too.

  • Black screen C805D - 13G satellite after the switch of the bios to the CSM

    Hi everyone, I really need help on this one.
    I have a Satellite C805D - 13G and it was working fine until I decided to install windows 7 on it. I did a USB key with the OS and the modified bios to UEFI in the CSM to boot from it. Well, since that point the PC never started again. It turns on but it shows nothing (even in the external vga monitor). RAM and HARD drive are very good.
    Y at - there anyone who can help? I have seen many similar cases on the internet, but I can't find any solution (already tried to disconnect the battery and hold the power button for 60 seconds)
    Thanks to all who help me to sort it.
    PS Sorry for my English, I'm from the Italy

    You just need to put the Boot Mode to the CSM to install Win7.
    If your USB boot it cannot be a problem with it. Try to create the USB using "WinUSB Maker"

  • L10W-B satellite - start mode of change to the CSM/Legacy

    Hello

    I just bought a toshiba satellite L10W-B and I am very disappointed by the fact that the possibility of changing the boot UEFI to CSM/legacy mode is not available, why is this?
    Can someone tell me how to proceed?
    The bios is not yet available, only the "Toshiba setup utility" instead, which only gives not many options, how do I access the BIOS, the real one?
    I've been around the internet for hours, did not find the answer.
    Thanks so much,

    I really want to know that, too. Please email me if find you a solution

  • Satellite C850-B763 - display doesn't change 'UEFI Boot' to 'CSM Boot.

    For the installation of windows 7 in toshiba satellite C850-B763,.
    I changed startup secure to be turned off and change the 'UEFI Boot' on 'Start of the CSM', then the screen of the laptop does not work.

    When I connect to an external display, it works

    Satellite B763-C850
    Part #: PSCBYV-059002AR

    kindly help to resolve the issue

    Thank you

    Alaka

    The value if please default BIOS and restart your laptop.
    Is everything OK?

  • Satellite L50 - Win 8.1 - passage of the CSM in UEFI?

    Hi guys.

    Yesterday, I upgraded my Toshiba Satellite L50 with an SSD.
    I installed windows 8.1 and everything seems to be ok... except a little thing...

    When I booted the usb to install windows 8.1 my bios has been installed in the CSM (because I read that if I were to UEFI, usb would be not be started) and now if I try to go to the UEFI pc cannot find the ssd drive and says something like "Reboot and select the right device.
    (I already tried with secure boot eneabled one and off the two but it's the same)

    At the moment I am active CSM with AHCI mode... What can I do to switch in uefi?

    Thanks in advance.

    Good news... Thanks for the feedback: spennacchione

  • CSM will not work even if the admin priveliges granted.

    CSM is a program I use to try to install a mod for a game, but when you try to run the MSC it says you need to run the program as administrator. After selecting the option "Run as Administrator" in the properties settings and then tell the program to run as administrator, it always comes up with the same error message even though it has all the priveliges he needs, any ideas on how to get it to work?

    nick_jones,
    Given that the program that you have trouble with is the CSM, you will need to contact the manufacturer to verify its compatibility with Windows 7.  I couldn't find it listed in the Windows Vista Compatibility Center: http://www.microsoft.com/windows/compatibility/windows-7/en-us/Default.aspx?type=Software Mike - engineer Microsoft Support responses
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • T430 install W7x64 without the CSM support

    Hello

    I'm trying to install windows 7 x 64 on a Thinkpad T430 without CSM (UEFI-> BIOS compatibility layer) because W7 is supported, but when I boot from the installation loading disk.sys DVD Installer blocks. I have try to disable the AHCI or other settings related to the discs, but nothing happens, I guess it's a bug in the UEFI!


  • U2715H, black flashing, disable the CSM in the bios

    * What operating system? Windows 10
    * Which video card? Gainward GTX 1060 6 GB
    * Video card driver version? Last Nvidia
    * Which ports are available for the video card? Several
    * Which video output from the video card port video on the port monitor do you use? DP > CDM
    * What cable are you using to set the video card to the monitor? DP > CDM
    * What Windows power plan? High Performance

    * Press the Menu button of the monitor to open the OSD (On Screen Display). The bottom of the screen should display a resolution. What is not? 2560x1440p
    * Has been the monitor purchased from Dell or a reseller? Amazon.de

    You can see the issue here

    www.YouTube.com/watch

    Gainward Gtx 1060 6 GB, i5 3570 k OECD 4.2 GHz, 16 GB of DDR3 RAM, Z77 Pro4, XFX Core Edition 650W 80 +.
    Monitors: Dell U2715H, Asus MX239

    Since the upgrade from GTX 660 > 1060 sometimes my U2715H Dell (1440 p) don't seem to be getting through DisplayPort signal when connected to my new GTX 1060 and starts "flashing" black. During this time I don't see anything about, the menu of the monitor even because it is completely black. This does not always happen, during boot that can't not what I thought, but when Windows loading sometimes starts, it becomes completely back until I have swap around the cables and inputs. However my other monitor connected with HDMI seems not at all affected while the other is flashes, there no CDM or DP to test with that. So I have a flashing monitor and the other being completely affected by it.

    This happens only with miniDisplayPort and DisplayPort so far, I've tried all 3 inputs on GPU and CDM and DP on monitor. This question was not present with my previous MSI GTX 660 Twin Frozr, he also only CDM. When you use HDMI it seems to be normal without blinking, but I need to test again because it does not always happen. Changing resolution does not help. Allows to close the monitor for a few minutes, but it can happen again. Tried to use DDU 3 times to fix without success so far. I guess it's the driver or the GPU, doubt it's the monitor because it worked fine on previous GPU. Any ideas?

    Fixed it by disabling the CSM in the BIOS. Been very well for 5 days, he became black once today, but has resumed normal again.

  • Integration of CSM 3.3 and ACS 5.1

    Been looking around the site of Cisco to check if Cisco Secure ACS 5.1 will fit with CSM 3.3

    The best I could find this: http://www.cisco.com/en/US/products/ps6498/products_configuration_example09186a00808eada8.shtml#tabcom

    Claiming that the CSM 3.2 works with ACS 4.2

    I assume that, because of the huge difference between 4.2 and 5.x that will not integrate?

    Thanks in advance,

    Bruce

    Bruce,

    Unfortunately, ACS 5.0 is not officially supported for integration with CSM 3.3. As shown in http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.3.1/release/notes/csmrn331.html AC 4.1and 4.2 are.

    PK

  • CSM 4.0.1 server requirements

    I've got the CSM 4.0.1 installation guide and am interested in the requirements of the min server / recommended.

    To run CSM 4.0.1 with VMWare, the OS is recommended for Windows 2008 Enterprise Server (SP2) 64-bit.

    Alternative OSs that are supported are:

    -Windows 2003 R2 Enterprise Server (SP2) 32-bit

    -Windows 2008 Enterprise Server (SP2) 32-bit

    My Server team tells me that our standard OS to use and support is Windows 2008 R2 Standard (SP2), and they are reluctant to load upward and support any other OS. They said that sometimes the documentation, as this CMS 4.0.1 Installation Guide, lags behind the actual supported OS for an application, so they asked I have contact Cisco and get the most currant supported OS requirements.

    So before I open evidence of the TAC with Cisco in order to ask the question, someone on this forum knows for sure if CSM 4.0.1 is supported or is NOT supported on Windows 2008 R2 Standard Server (SP2) - 64-bit?  The 'Standard' and 'R2' are major issues.

    Win2008 R2 64-bit support will be added in 4.1 (planned).

    At the moment it is not officially supported.

    Stefano

  • CSM Flex Config - HitCnt reset via Flexconfig and $Variable possible?

    Hello

    I want to erase all the Hitcnt on all the firewall via the MSC Flexconfig.

    Can I use $Variable in FlexConfig to transfer the value of / to the other order of firewall?

    for example

    I type the command

    # access-list HS | element of grep

    -to discover the available on the firewall access lists

    I have transfer the output for example 'inside_access_in' to a $variable and use this variable in the command to clear the HitCnt: access-list "$variable" clear counters

    Any idea?

    THX for the help

    Answers after:

    1. Yes, after you have assigned the FlexConfig you can right click on the device in the CSM and do a 'Preview' Config and who will show you the commands that are made to be pushed at deployment time.

    2. the system variables are not editable. They represent something that you already configured on the device. You can create variables in the config of Flex that you can modify.

    3. you can 2 variable for in and out LCD. They are SYS_FW_ACL_IN_NAME and SYS_FW_ACL_OUT_NAME. Watch http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.3/user/guide/tmplchap.html#wp939447

    So you can erase using both counters.

    Please mark the thread as answered if it is.

    PK

  • CSM 4.0.1 and ASA 8.2 (3) support

    Hello

    I use the CSM 4.0.1 and when I try to add a new ASA (5520 or 5550) who has a version 8.2 (3) he rejects operation because it is said that there is no such thing!

    When you look at the compatibility matrix, I found that the 4.0.1 supports only the 5585-X with the 8.2 (3) because it is the only unit with this version!

    However, version 8.2 (3) exist also for the 5520 or 5550! I downloaded and installed!

    What should I do? MSC it will support the next version? (I don't want to upgrade my ASA for the moment, because it's the only version that meets my needs)

    Thank you!

    Hello

    Indeed, it is a known problem. You can refer to CSCtj48666 (well what is internal, so you won't see much...)

    Please open a TAC case and ask the engineer to provide 4.0.1 patch cumulative No 2 (CP2) or the most recent available (at the time I write this is the last...). This is the fix for support on 8.2.3.

    Let me know if any question

    Merry Christmas

    Stefano

  • Error when adding new subnet for CSM group

    Hello

    I'm trying to add a new subnet to an existing group in the CSM v4.0.1 b7823 company.  When you add a new subnet to the Group (the other elements of the group is a different subnet), CSM emits several errors for each SAA touched:

    Description:

    BB (GROUPNAME), referenced by the 'Http network' on maps (DEVICENAME) device to multiple network IP addresses!

    Cause:

    Made http refers to a network object that corresponds to more than one IP address on the device

    Action:

    Please config the policy with the network object that resolves to a single IP address.

    There is an error for ICMP as well.  The group is already a /24subnet content, I don't think it's a clear mistake.  Has anyone encounter this?

    Thank you very much.

    Justin

    Hi Justin,

    what you observe is normal given the way in which we have set up the remote access policy. As you probably know, in cli, you can specify only one rule of access by line for ssh, http, telnet etc...

    For example, if you want to allow ssh access to ASA lines host 1.1.1.1 and 2.2.2.2 you put two

    SSH 2.2.2.2 255.255.255.255 outside

    SSH 1.1.1.1 255.255.255.255 outside

    The CSM, we model this two lines as two different object, so the building of network type block object that refers to the object of type ssh access can have only one entry. This behavior is the same for ICMP as well.

    Access list is different because we model to the CSM in a different way, plus you can use the object-group put on different networks. It is not possible to access to the device.

    I hope that gave you an overview a little more on the reason

    Also it would be nice to score this answer if this is the case

    Stefano

  • 3.3.1 and 6500 CSM

    Hello

    We are facing a problem with a CSM 3.3.1 switch and 6500 and FWSM. We have 2 x 6500 switches with 2 supervisors each + 2 cards FWSM one in each frame. The problem is that we have MSC 3.3.1 who manages the switch and FWSM. The problem is that when we try to delete a VLAN to 6500 we get a deployment failed because the switch will display this message:

    Change VLAN applying % can take a few minutes. Please wait..

    We use the following version of IOS.

    CSR-CORE #sh worm

    Cisco IOS software, software of s72033_rp (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2 (33) SXI2a, VERSION of the SOFTWARE (fc2)

    Technical support: http://www.cisco.com/techsupport

    Copyright (c) 1986-2009 by Cisco Systems, Inc.

    Last update Wed 02 - Sep - 09 01:00 by prod_rel_team

    ROM: System Bootstrap, SX6 Version 12.2 (17r), RELEASE SOFTWARE (fc1)

    The availability of CSR-CORE is 22 weeks, 6 days, 23 hours, 59 minutes

    Availability for this control processor is 22 weeks, 6 days, 23 hours, 55 minutes

    Since CSR-CORE time spent active is 22 weeks, 6 days, 23 hours, 55 minutes

    System returned to ROM by power cycle at 06:42:16 UTC Friday, February 12, 2010 (market SP)

    System restarted at 11:10:39 IS Monday, June 14, 2010

    System image file is "sup - bootdisk:s72033 - ipservicesk9_wan - mz.122 - 33.SXI2a.bin".

    Reload last reason: reload command

    This product contains cryptographic features and is under the United States

    States and local laws governing the import, export, transfer and

    use. Delivery of Cisco cryptographic products does not imply

    third party approval to import, export, distribute or use encryption.

    Importers, exporters, distributors and users are responsible for

    compliance with U.S. laws and local countries. By using this product you

    agree to comply with the regulations and laws in force. If you are unable

    to satisfy the United States and local laws, return the product.

    A summary of U.S. laws governing Cisco cryptographic products to:

    http://www.Cisco.com/WWL/export/crypto/tool/stqrg.html

    If you need assistance please contact us by mail at

    [email protected] / * /.

    processor of WS-C6509-E (R7000) Cisco (revision 1.5) with 983008K / 65536K bytes of memory.

    Card processor ID SMC1401000U

    SR71000 pace at 600 Mhz, implemented 0 x 504, Rev 1.2, 512 KB of L2 Cache

    Last reset to reset the s/w

    30 virtual Ethernet interfaces

    116 of the gigabit Ethernet interfaces

    12 ten interfaces Ethernet Gigabit

    1917K bytes of non-volatile configuration memory.

    8192K bytes of packet buffer.

    65536 K bytes of Flash internal SIMM (sector size of 512K).

    Configuration register is 0 x 2102

    CSR-CORE #.

    Note that we don't use vs.
    TIA,
    Nicos

    Hi Nicolas,.

    answer Panos answers your question? Otherwise, let know us and we will investigate further.

    Thank you

    Stefano

  • Upgrade CSM and ACS

    1. cisco ACS /Solution Engine, according to me, the dedicated device, unknown version)

    2 cisco Security Manager 3.1

    Are updates possible, or buy the latest version of the product is the only way out?

    What do we need for the upgrade?

    Are there specific codes or new need to buy new products?

    In case of purchase of new products, which are the configurations?

    Your response will be appreciated.

    The GBA unit has been released with at least three different major versions - 3.x, 4.x and 5.x. If you have ACS 4.2 on a device of 1120, you can proceed to the last (5.3) on the same hardware. Anything else will be require a new device (or use a VM solution).

    Please see guide to orders and the migration guide for this information.

    For the CSM, to upgrade you would need to go to 3.3. First, then to the current version of CSM (4.2). The necessary licenses are described in this product bulletin.

    It would probably be easier and more own just build a new facility in both cases. Architecture products both db schema have changed significantly. The SKU upgrade probably will save in licensing fees, even though the two products have undergone changes in how they are allowed.

    Note that CSM will come out with a new version 4.3 more later this spring.

Maybe you are looking for