Cisco Bug: CSCsy79491 - Rule generation fail after import 5.2 migration data
Feb 22, 2014
- Cisco Security Agent
Known Affected Releases
Symptom: After importing the 126.96.36.1992 migration data into the 6.0 CSA MC, the 6.0 CSA MC rule generation fails with the following error message: "Invalid application process class identifier "" " Conditions: When <*Processes Writing Untrusted Content> application class is used in a customized rule in CSA 5.2. Workaround: Find all occurrences of <*Process Writing Untrusted Content> used in CSA 5.2 rules and rewrite the rules to use <*Process Executing Untrusted Content>. CSA 5.2 has these two built-in application classes: <*Process Writing Untrusted Content> and <*Process Executing Untrusted Content>. CSA 6.0 only has the <*Process Executing Untrusted Content> application class. Customized CSA 5.2, rules referencing <*Process Writing Untrusted Content> do not have a built-in application class to map to after the migration.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases