Cisco Cisco Unified Contact Center Enterprise 9.0(2) Installation Guide

Before you install the Cisco Security Agent for Cisco ICM software, review the following information:

Confirm that the computer you are using to install Cisco Security Agent has 20 MB of hard disk 
space available for the download file and the installed files.

Cisco ICM software must be installed before you install Cisco Security Agent.

Before each Cisco ICM upgrade, you must disable the Cisco Security Agent service. You must also 
be sure that the service does not get enabled at any time during the Cisco ICM installation. For 
information on how to disable the service, see the section 

.

You must disable the Cisco Security Agent service before performing any software installation. This 
means before every operating system, Cisco ICM and third-party installation and upgrade, including 
maintenance release, service release, and support patch installations and upgrades.

Ensure that the service does not get enabled at any time during the installation or upgrade. Failure to do 
so may cause problems with the installation or upgrade, since the Cisco Security Agent may block part 
of the installation if not disabled. 

After installing or upgrading the software, you must reenable the Cisco Security Agent Service. With the 
service disabled, the Agent no long provides intrusion detection for the server.

Setup for ICM and IPCC will offer to disable and reenable CSA for you; in these cases, the actions 
described above do not have to be performed manually. (Note: If CSA has been disabled, and then a 
drastic system failure occurs, you may need to reenable CSA manually.)

If Terminal Services software is installed on your system, do not use it to install or upgrade the Cisco 
Security Agent (unless logged into session :0 with console access). If you want to, you can use 
pcAnywhere or Virtual Network Computing (VNC) to remotely install or upgrade the Agent. 

Rebooting should be done immediately after installation, because although the Cisco Security Agent 
protects the server as soon as you install the software, it does not provide complete functionality 
until the server is rebooted. In particular, the following limitations exist if the system is not 
rebooted:

Network Shield rules are not applied

Network access control rules only apply to new socket connects (though stopping and restarting 
network server service will provide full network access control security, even without a system 
reboot)

Data access control rules are not applied (though stopping and restarting the web server service 
will apply data access control security, even without a system reboot)

To minimize effects on resources, Cisco recommends that you install/reboot at the end of the business 
day or during a time when processing is minimal, preferably during a regularly scheduled maintenance 
window.