RE: Cisco CSA

["Scherer, Brian" <BScherer () dialamerica com>]

CSA is a host based IPS

"Cisco Security Agent provides threat protection for server and desktop
computing systems, also known as endpoints. It identifies and prevents
malicious behavior, thereby eliminating known and unknown ("Day Zero")
security risks and helping to reduce operational costs. The Cisco
Security Agent aggregates and extends multiple endpoint security
functions by providing host intrusion prevention, distributed firewall
capabilities, malicious mobile code protection, operating system
integrity assurance, and audit log consolidation, all within a single
product. And because Cisco Security Agent analyzes behavior rather than
relying on signature matching, it provides robust protection with
reduced operational costs."

http://www.cisco.com/en/US/products/sw/secursw/ps5057/



-----Original Message-----
From: bryan_khoo () dynacraft com [mailto:bryan_khoo () dynacraft com] 
Sent: Wednesday, May 26, 2004 8:18 PM
To: Cherian Palayoor
Cc: security-basics () securityfocus com
Subject: Re: Cisco CSA


Hi Cherian,
              You can look into product like IPS. I think it should be
better than CSA.

Rdgs,
Bryan



                 *** TOWARDS CUSTOMER CENTERED CULTURE ***
        ** Dynacraft is a QS9000 and ISO14001 certified company **

|---------+---------------------------->
|         |           Cherian Palayoor |
|         |           <securinet2004@ya|
|         |           hoo.ca>          |
|         |                            |
|         |           05/26/2004 07:35 |
|         |           AM               |
|         |                            |
|---------+---------------------------->
 
> -----------------------------------------------------------------------
----------------------------------------------------------------------|
  |
|
  |       To:       security-basics () securityfocus com
|
  |       cc:
|
  |       Subject:  Cisco CSA
|
 
> -----------------------------------------------------------------------
----------------------------------------------------------------------|




Hi,

Can anyone give me some feedback on the Cisco Security Agent. This
product claims to stop malicious behaviour on machines infected by any
malware.

We were recently hit pretty hard by Sasser. Cisco has since been trying
to sell us this product as a heuristic solution to malicious activity on
the network. The product does not depend on any signature updates and is
entirely behavioural.

Cisco puports to have successfully stopped Sasser from doing any damage.

Can anyone confirm this to be a fact. The product does not come cheap.

Thanks in advance.

Regards

Cherian


______________________________________________________________________
Post your free ad now! http://personals.yahoo.ca

------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off any course! All of our class sizes are guaranteed to be 10 students
or less

to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of
in-the-field pen testing experience in our state of the art hacking lab.
Master the skills of an Ethical Hacker to better assess the security of
your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----


"Visit Our Website at :- www.dynacraft.com"




------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off any course! All of our class sizes are guaranteed to be 10 students
or less to facilitate one-on-one interaction with one of our expert
instructors. 
Attend a course taught by an expert instructor with years of
in-the-field pen testing experience in our state of the art hacking lab.
Master the skills of an Ethical Hacker to better assess the security of
your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----




---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------