CSA MC Registration Control

 < Day Day Up > 

The CSA MC can control agent registration beyond just license availability. This function is called registration control. To configure this function, choose Systems > Registration Control. The method that registration control uses to limit licensing is based on the source IP address information from the client. When a client attempts to register, its communication with the CSA MC is over TCP/IP, which allows the CSA MC server to view the IP address of the remote system and limit access to the registration process. The administrator configures the registration filter, as displayed in Figure 14-2, using IP address ranges to denote what subnet an agent must reside in for registration to complete successfully. For an agent to even attempt to register with the CSA MC, the agent kit used for installation must be built on that CSA MC server and will include the fully qualified domain name of the MC and the MC certificate. The name must be resolved through any valid resolution method such as Domain Name System (DNS), Windows Internet Name Service (WINS), or host file to get the host connected with the correct CSA MC server.

Figure 14-2. CSA MC Registration Control by IP Address


NOTE

By default, the CSA MC registration control filter is 0.0.0.0-255.255.255.255, which will not prevent any agent registration request.


     < Day Day Up > 


    Cisco Security Agent
    Cisco Security Agent
    ISBN: 1587052059
    EAN: 2147483647
    Year: 2005
    Pages: 145
    Authors: Chad Sullivan

    flylib.com © 2008-2017.
    If you may any questions please contact us: flylib@qtcs.net