Guest

Cisco Unity

Release Notes for Cisco Security Agent for Cisco Unity, Release 1.1(1)

Hierarchical Navigation

Downloads

 Feedback

Table Of Contents

Release Notes for Cisco Security Agent for Cisco Unity Release 1.1(1)

Contents

Introduction

System Requirements

Determining the Software Version

Cisco Security Agent

Policy for Cisco Security Agent for Cisco Unity

Downloading Cisco Security Agent for Cisco Unity 1.1(1)

Installing Cisco Security Agent for Cisco Unity 1.1(1)

Notes on Using Cisco Security Agent for Cisco Unity

Cisco Security Agent Task Bar Icon Available Only for First Windows Logon

Locations in Which Cisco Security Agent Logs Events

Disabling and Re-enabling the Cisco Security Agent Service

Viewing a Cisco Unity Administrator Page That Includes a Cisco Media Control

Uninstalling Cisco Security Agent for Cisco Unity

Cisco Unity Documentation

Obtaining Documentation

Cisco.com

Documentation CD-ROM

Ordering Documentation

Documentation Feedback

Obtaining Technical Assistance

Cisco TAC Website

Opening a TAC Case

TAC Case Priority Definitions

Obtaining Additional Publications and Information


Release Notes for Cisco Security Agent for Cisco Unity Release 1.1(1)

Revised October 8, 2003

These release notes provide download and installation instructions, and information on Cisco Security Agent for Cisco Unity Release 1.1(1).

Cisco Security Agent for Cisco Unity software is available on the Cisco Unity™ Crypto Software Download page at http://www.cisco.com/cgi-bin/tablebuild.pl/unity3d.

Contents

These release notes contain the following sections:

•Introduction

•System Requirements

•Determining the Software Version

•Downloading Cisco Security Agent for Cisco Unity 1.1(1)

•Installing Cisco Security Agent for Cisco Unity 1.1(1)

•Notes on Using Cisco Security Agent for Cisco Unity

•Uninstalling Cisco Security Agent for Cisco Unity

•Cisco Unity Documentation

•Obtaining Documentation

•Obtaining Technical Assistance

•Obtaining Additional Publications and Information

Introduction

Cisco Security Agent for Cisco Unity provides intrusion prevention, malicious mobile code protection, operating system integrity assurance, and audit log consolidation. It is a standalone Cisco Security Agent that is provided free of charge by Cisco Systems for use with Cisco Unity servers that meet the system requirements specified in the "System Requirements" section.

Cisco Security Agent for Cisco Unity was created by using CiscoWorks Management Center for Cisco Security Agents and is based on the following Management Center for Cisco Security Agents version 4.0, build 119 policies:

•Required Windows System Module

•Common Security Module

•Common Web Server Security Module

•Restrictive MS IIS Module

•Server Module

•User Authentication Auditing Module

•Virus Scanner Module

Cisco Security Agent for Cisco Unity version 1.1(1) also includes the Unity Base Group Exceptions policy, which allows normal Cisco Unity operations that the other policies would not allow.

To add, change, delete, or view policies included in Cisco Security Agent for Cisco Unity, run CiscoWorks Management Center for Cisco Security Agents, and import the file CSA-for-Cisco-Unity-4x-ver-1-1-1.export. The file is available at http://www.cisco.com/cgi-bin/tablebuild.pl/unity3d.

For more information on CiscoWorks Management Center for Cisco Security Agents and on Cisco Security Agent, refer to http://www.cisco.com/en/US/products/sw/cscowork/ps5212/index.html.

System Requirements

•Cisco Unity version 4.0(1) or later.

•Microsoft Windows 2000 Server in English or Windows 2000 Advanced Server in English.

Note If you install Cisco Security Agent for Cisco Unity on a server running Windows in Japanese, the display of some non-ASCII characters will be corrupted.

•If the message store is installed on the Cisco Unity server, Microsoft Exchange 2000 for the message store.

•If the message store is not installed on the Cisco Unity server, IBM Lotus Domino or Microsoft Exchange 2000 for the message store.

•If backup software is installed on the Cisco Unity server, one of the following applications:

–VERITAS Backup Exec for Microsoft Windows NT and Windows 2000, version 8.5 or later.

–VERITAS NetBackup version 4.5 or later.

•If virus-scanning software is installed on the Cisco Unity server, McAfee NetShield for Microsoft Windows NT and Windows 2000, version 4.5 or later.

•Windows Automatic Update configured so that it does not automatically download updates to the Cisco Unity server.

Determining the Software Version

This section contains procedures for determining the version in use for the following software:

•Cisco Security Agent

•Policy for Cisco Security Agent for Cisco Unity

Cisco Security Agent

To Determine the Cisco Security Agent Version in Use

Step 1 Start Regedit.

Caution Changing the wrong registry key or entering an incorrect value can cause the server to malfunction. Before you edit the registry, confirm that you know how to restore it if a problem occurs. (Refer to the "Restoring" topics in Registry Editor Help.) If you have any questions about changing registry key settings, contact Cisco TAC.

Step 2 If you do not have a current backup of the registry, click Registry > Export Registry File, and save the registry settings to a file.

Step 3 Expand the key
HKEY_LOCAL_MACHINE\Software\Cisco Systems, Inc.\System Info\CSA Agent\Version.

Step 4 Close Regedit.

Policy for Cisco Security Agent for Cisco Unity

To Determine the Policy Version in Use for Cisco Security Agent for Cisco Unity

Step 1 Start Regedit.

Caution Changing the wrong registry key or entering an incorrect value can cause the server to malfunction. Before you edit the registry, confirm that you know how to restore it if a problem occurs. (Refer to the "Restoring" topics in Registry Editor Help.) If you have any questions about changing registry key settings, contact Cisco TAC.

Step 2 If you do not have a current backup of the registry, click Registry > Export Registry File, and save the registry settings to a file.

Step 3 Expand the key
HKEY_LOCAL_MACHINE\Software\Cisco Systems, Inc.\System Info\Unity-CSA Policy\Version.

Step 4 Close Regedit.

Downloading Cisco Security Agent for Cisco Unity 1.1(1)

To Download Cisco Security Agent for Cisco Unity 1.1(1)

Step 1 Confirm that the computer you are using has up to 20 MB of hard-disk space for the download file and the installed files.

Step 2 On a computer with a high-speed Internet connection, go to the Cisco Unity Crypto Software Download page at http://www.cisco.com/cgi-bin/tablebuild.pl/unity3d.

Step 3 Click CiscoUnity-CSA-4.0.0.119-1.1.1-Setup-K9.exe.

Step 4 Follow the on-screen prompts to complete the download.

Step 5 If you plan to install Cisco Security Agent for Cisco Unity from a compact disc, burn the CD.

Installing Cisco Security Agent for Cisco Unity 1.1(1)

We recommend that you install Cisco Security Agent for Cisco Unity after regular business hours because the installation will affect Cisco Unity performance. In addition, when the installation completes, you must restart the Cisco Unity server for Cisco Security Agent for Cisco Unity to start working.

Do not install Cisco Security Agent for Cisco Unity by using Windows Terminal Services.

To Install Cisco Security Agent for Cisco Unity 1.1(1)

Step 1 If Cisco IDS Host Sensor or another intrusion-detection application is installed on the Cisco Unity server, uninstall the application before installing Cisco Security Agent for Cisco Unity. Refer to the Cisco IDS Host Sensor or other applicable documentation.

Step 2 If Windows Automatic Update is configured to automatically download updates from the Microsoft website, disable it.

Step 3 In Windows Explorer, browse to the directory to which you downloaded the Cisco Security Agent for Cisco Unity file, and double-click CiscoUnity-CSA-4.0.0.119-1.1.1-Setup-K9.exe.

Step 4 Follow the on-screen prompts.

Step 5 When the installation completes, click Yes, I Want to Restart My Computer Now, and click Finish.

Cisco Security Agent for Cisco Unity begins to work as soon as you restart the Cisco Unity server. You do not need to configure the application.

Notes on Using Cisco Security Agent for Cisco Unity

The following sections contain information on using Cisco Security Agent for Cisco Unity:

•Cisco Security Agent Task Bar Icon Available Only for First Windows Logon

•Locations in Which Cisco Security Agent Logs Events

•Disabling and Re-enabling the Cisco Security Agent Service

•Viewing a Cisco Unity Administrator Page That Includes a Cisco Media Control

Cisco Security Agent Task Bar Icon Available Only for First Windows Logon

If two people log on to Windows on the Cisco Unity server—one at the server and the other by using Windows Terminal Services, or both by using Terminal Services—only the first person to log on will have access to the Cisco Security Agent icon.

Locations in Which Cisco Security Agent Logs Events

Cisco Security Agent logs events in the following three locations:

Windows application
event log

Events that are generated by Cisco Security Agent have an event source of CSAgent.

Securitylog.txt

Cisco Security Agent logs one event per line. We recommend that each administrator who logs on to the Cisco Unity server add a shortcut for Securitylog.txt to the Windows desktop. The file is located in the <InstallDirectory>\Cisco\CSAgent\Log directory.

CSA Control Panel

To display the CSA Control Panel, double-click the Cisco Security Agent task bar icon, and click the Messages tab. Only events that have occurred since you logged on to Windows appear in the CSA Control Panel.


Disabling and Re-enabling the Cisco Security Agent Service

Stop Cisco Security Agent in the following situations:

•Before you use any Cisco Unity tool in:

–Cisco Unity Tools Depot.

–The CommServer\Utilities directory.

–The CommServer\TechTools directory.

•Before you use any Cisco Unity tool that you download from CiscoUnityTools.com.

•Before you install any software on the Cisco Unity server.

•Before you upgrade any software, including Cisco Unity, on the Cisco Unity server. This also applies to automatic upgrades.

•Before you add, change, or delete values in the Windows registry.

•Before you change Windows system or boot files.

Caution When you disable the Cisco Security Agent service, you must re-enable it before it starts monitoring the Cisco Unity server again.

To Disable the Cisco Security Agent Service

Step 1 On the Windows Start menu, click Programs > Administrative Tools > Services.

Step 2 In the right pane, double-click Cisco Security Agent.

Step 3 On the General tab, in the Startup Type list, click Disabled.

Step 4 Click Stop.

Step 5 Click OK to close the Cisco Security Agent Properties dialog box.

Step 6 Close Services.

To Re-enable the Cisco Security Agent Service

Step 1 On the Windows Start menu, click Programs > Administrative Tools > Services.

Step 2 In the right pane, double-click Cisco Security Agent.

Step 3 On the General tab, in the Startup Type list, click Automatic.

Step 4 Click Start.

Step 5 Click OK to close the Cisco Security Agent Properties dialog box.

Step 6 Close Services.

Viewing a Cisco Unity Administrator Page That Includes a Cisco Media Control

When you view a page in the Cisco Unity Administrator that includes a Cisco Media control for the first time, you will be prompted to install the Cisco Media control (which is used for making and playing recordings). Cisco Security Agent for Cisco Unity will detect the installation of the control, interrupt the installation, and display a warning message. Click Yes to allow the Cisco Media control to be installed. If the warning appears a second time, click Yes again.

Uninstalling Cisco Security Agent for Cisco Unity

To Uninstall Cisco Security Agent for Cisco Unity

Step 1 Right-click the Cisco Security Agent icon in the Windows task bar, and click Suspend Security.

If the icon does not appear in the task bar, on the Windows Start menu, click Programs > Administrative Tools > Services, and stop the Cisco Security Agent service.

Step 2 On the Windows Start menu, click Programs > Cisco Systems > Uninstall Cisco Security Agent.

Step 3 Click Yes to confirm that you want to uninstall Cisco Security Agent for Cisco Unity.

Step 4 Click Yes again to restart the Cisco Unity server.

Cisco Unity Documentation

For descriptions and URLs of Cisco Unity documentation on Cisco.com, refer to About Cisco Unity Documentation. The document is shipped with Cisco Unity and is available at http://www.cisco.com/univercd/cc/td/doc/product/voice/c_unity/about/aboutdoc.htm.

Obtaining Documentation

Cisco provides several ways to obtain documentation, technical assistance, and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation on the World Wide Web at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

International Cisco websites can be accessed from this URL:

http://www.cisco.com/public/countries_languages.shtml

Documentation CD-ROM

Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which may have shipped with your product. The Documentation CD-ROM is updated regularly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual or quarterly subscription.

Registered Cisco.com users can order a single Documentation CD-ROM (product number DOC-CONDOCCD=) through the Cisco Ordering tool:

http://www.cisco.com/en/US/partner/ordering/ordering_place_order_ordering_tool_launch.html

All users can order annual or quarterly subscriptions through the online Subscription Store:

http://www.cisco.com/go/subscription

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

•Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Networking Products MarketPlace:

http://www.cisco.com/en/US/partner/ordering/index.shtml

•Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).

Documentation Feedback

You can submit comments electronically on Cisco.com. On the Cisco Documentation home page, click Feedback at the top of the page.

You can send your comments in e-mail to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco Technical Assistance Center (TAC) provides 24-hour, award-winning technical support services, online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for technical assistance.

Cisco TAC Website

The Cisco TAC website (http://www.cisco.com/tac) provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The Cisco TAC website is available 24 hours a day, 365 days a year.

Accessing all the tools on the Cisco TAC website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a login ID or password, register at this URL:

http://tools.cisco.com/RPF/register/register.do

Opening a TAC Case

The online TAC Case Open Tool (http://www.cisco.com/tac/caseopen) is the fastest way to open P3 and P4 cases. (Your network is minimally impaired or you require product information). After you describe your situation, the TAC Case Open Tool automatically recommends resources for an immediate solution. If your issue is not resolved using these recommendations, your case will be assigned to a Cisco TAC engineer.

For P1 or P2 cases (your production network is down or severely degraded) or if you do not have Internet access, contact Cisco TAC by telephone. Cisco TAC engineers are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.

To open a case by telephone, use one of the following numbers:

Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447

For a complete listing of Cisco TAC contacts, go to this URL:

http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml

TAC Case Priority Definitions

To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.

Priority 1 (P1)—Your network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.

Priority 2 (P2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.

Priority 3 (P3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.

Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.

Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online and printed sources.

•The Cisco Product Catalog describes the networking products offered by Cisco Systems, as well as ordering and customer support services. Access the Cisco Product Catalog at this URL:

http://www.cisco.com/en/US/products/products_catalog_links_launch.html

•Cisco Press publishes a wide range of networking publications. Cisco suggests these titles for new and experienced users: Internetworking Terms and Acronyms Dictionary, Internetworking Technology Handbook, Internetworking Troubleshooting Guide, and the Internetworking Design Guide. For current Cisco Press titles and other information, go to Cisco Press online at this URL:

http://www.ciscopress.com

•Packet magazine is the Cisco quarterly publication that provides the latest networking trends, technology breakthroughs, and Cisco products and solutions to help industry professionals get the most from their networking investment. Included are networking deployment and troubleshooting tips, configuration examples, customer case studies, tutorials and training, certification information, and links to numerous in-depth online resources. You can access Packet magazine at this URL:

http://www.cisco.com/go/packet

•iQ Magazine is the Cisco bimonthly publication that delivers the latest information about Internet business strategies for executives. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazine

•Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/en/US/about/ac123/ac147/about_cisco_the_internet_protocol_journal.html

•Training—Cisco offers world-class networking training. Current offerings in network training are listed at this URL:

http://www.cisco.com/en/US/learning/index.html

Copyright © 2003 Cisco Systems, Inc. All rights reserved.