Re: HIPS experience

["Kristian Hermansen" <kristian.hermansen () gmail com>]

On 5/15/07, "Mike LeBlanc" <mlinfosec () comcast net> wrote:
> Would love to hear nay feedback form the list on these or other products.

Have you considered Cisco Security Agent?  This is the de facto
standard amongst corporations/governments with highly valuable assets.
 Although, the costs are also quite reasonable for both Desktop and
Server licensing.  CSA protects against Zero Day attacks, which is
something many products claim, but few actually do.

http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html

List of attacks stopped on Day Zero, in default CSA policy
configuration, and requiring no user interaction after installation
(takes 30-60 minutes to install):

Bagle
SQL Snake
Blaster
JPEG/GDI+
Bugbear
MyDoom
Code Red
Nimda
Debploit
Pentagone/Gonner
Fizzer
Sasser
Gator/Gain
Sircam
Hotbar
Sobig
SQL Slammer
Zotob

Here's a company write-up on how they benefited from CSA deployment:
http://www.cisco.com/en/US/products/sw/secursw/ps5057/products_case_study0900aecd8033ab2f.shtml
-- 
Kristian Hermansen
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards