Cisco Security Agent

Cisco Security Agent presents a detailed explanation of Cisco Security Agent, illustrating the use of host Intrusion Prevention Systems (IPS) in modern self-defending network protection schemes. At the endpoint, the deployment of a host IPS provides protection against both worms and viruses. Rather than focusing exclusively on reconnaissance phases of network attacks a host IPS approaches the problem from the other direction, preventing malicious activity on the host by focusing on behavior. By changing the focus to behavior, damaging activity can be detected and blocked–regardless of the attack.

Edición: Cisco Press (2005)
Idioma: Inglés
Formato: CHM

Contenido:

1. Introducing Endpoint Security
2. Introducing the Cisco Security Agent
3. Understanding CSA Groups and Hosts
4. Understanding CSA Policies, Modules, and Rules
5. Understanding Application Classes and Variables
6. Understanding CSA Components and Installation
7. Using the CSA User Interface
8. Monitoring CSA Events
9. Using CSA MC Reports
10. Application Deployment Investigation
11. Application Behavior Analisis
12. Creating and Tuning Policy
13. Developing a CSA Project Implementation Plan
14. CSA MC Administration and Maintenance
15. Appendix A: VMS and CSA MC 4.5 Installation
16. Appendix B: Security Monitor Integration
17. Appendix C: CSA MIB

Descarga/Download