RE: Cisco CSA

From: Scherer, Brian (BScherer_at_dialamerica.com)
Date: 05/28/04

  • Next message: Yibran Montalvo: "Re: modifying configuration registrar inside cisco 2600 so as to change password"
    Date: Fri, 28 May 2004 11:29:58 -0400
    To: <bryan_khoo@dynacraft.com>, "Cherian Palayoor" <securinet2004@yahoo.ca>
    
    

    CSA is a host based IPS

    "Cisco Security Agent provides threat protection for server and desktop
    computing systems, also known as endpoints. It identifies and prevents
    malicious behavior, thereby eliminating known and unknown ("Day Zero")
    security risks and helping to reduce operational costs. The Cisco
    Security Agent aggregates and extends multiple endpoint security
    functions by providing host intrusion prevention, distributed firewall
    capabilities, malicious mobile code protection, operating system
    integrity assurance, and audit log consolidation, all within a single
    product. And because Cisco Security Agent analyzes behavior rather than
    relying on signature matching, it provides robust protection with
    reduced operational costs."

    http://www.cisco.com/en/US/products/sw/secursw/ps5057/

    -----Original Message-----
    From: bryan_khoo@dynacraft.com [mailto:bryan_khoo@dynacraft.com]
    Sent: Wednesday, May 26, 2004 8:18 PM
    To: Cherian Palayoor
    Cc: security-basics@securityfocus.com
    Subject: Re: Cisco CSA

    Hi Cherian,
                  You can look into product like IPS. I think it should be
    better than CSA.

    Rdgs,
    Bryan

                     *** TOWARDS CUSTOMER CENTERED CULTURE ***
            ** Dynacraft is a QS9000 and ISO14001 certified company **

    |---------+---------------------------->
    | | Cherian Palayoor |
    | | <securinet2004@ya|
    | | hoo.ca> |
    | | |
    | | 05/26/2004 07:35 |
    | | AM |
    | | |
    |---------+---------------------------->
     
    >-----------------------------------------------------------------------
    ----------------------------------------------------------------------|
      |
    |
      | To: security-basics@securityfocus.com
    |
      | cc:
    |
      | Subject: Cisco CSA
    |
     
    >-----------------------------------------------------------------------
    ----------------------------------------------------------------------|

    Hi,

    Can anyone give me some feedback on the Cisco Security Agent. This
    product claims to stop malicious behaviour on machines infected by any
    malware.

    We were recently hit pretty hard by Sasser. Cisco has since been trying
    to sell us this product as a heuristic solution to malicious activity on
    the network. The product does not depend on any signature updates and is
    entirely behavioural.

    Cisco puports to have successfully stopped Sasser from doing any damage.

    Can anyone confirm this to be a fact. The product does not come cheap.

    Thanks in advance.

    Regards

    Cherian

    ______________________________________________________________________
    Post your free ad now! http://personals.yahoo.ca

    ------------------------------------------------------------------------

    ---
    Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
    off any course! All of our class sizes are guaranteed to be 10 students
    or less
    to facilitate one-on-one interaction with one of our expert instructors.
    Attend a course taught by an expert instructor with years of
    in-the-field pen testing experience in our state of the art hacking lab.
    Master the skills of an Ethical Hacker to better assess the security of
    your organization.
    Visit us at:
    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    ------------------------------------------------------------------------
    ----
    "Visit Our Website at :- www.dynacraft.com"
    ------------------------------------------------------------------------
    ---
    Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
    off any course! All of our class sizes are guaranteed to be 10 students
    or less to facilitate one-on-one interaction with one of our expert
    instructors. 
    Attend a course taught by an expert instructor with years of
    in-the-field pen testing experience in our state of the art hacking lab.
    Master the skills of an Ethical Hacker to better assess the security of
    your organization. 
    Visit us at: 
    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    ------------------------------------------------------------------------
    ----
    ---------------------------------------------------------------------------
    Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
    any course! All of our class sizes are guaranteed to be 10 students or less 
    to facilitate one-on-one interaction with one of our expert instructors. 
    Attend a course taught by an expert instructor with years of in-the-field 
    pen testing experience in our state of the art hacking lab. Master the skills 
    of an Ethical Hacker to better assess the security of your organization. 
    Visit us at: 
    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    ----------------------------------------------------------------------------
    

  • Next message: Yibran Montalvo: "Re: modifying configuration registrar inside cisco 2600 so as to change password"

    Relevant Pages

    • [NT] Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability
      ... Get your security news from a reliable source. ... Cisco Security Agent for Windows System Driver Remote Buffer Overflow ... affected because TCP ports 139 and 445 have been firewalled by the ACS ...
      (Securiteam)
    • [NT] Cisco Security Agent Remote Buffer Overflow Vulnerability
      ... Get your security news from a reliable source. ... Cisco Security Agent Remote Buffer Overflow Vulnerability ... Cisco Security Agent for Windows which allows remote code execution by ... Cisco Security Agent for Windows versions prior to 4.5.1.672 ...
      (Securiteam)
    • RE: fax software in the domain
      ... You could add an extra layer of security by changing by connecting the ... Ethical Hacking at the InfoSec Institute. ... Attend a course taught by an expert instructor with years of ...
      (Security-Basics)
    • RE: Legal? Road Runner proactive scanning.
      ... >> Attend a course taught by an expert instructor with years of ... >> pen testing experience in our state of the art hacking lab. ... >> of an Ethical Hacker to better assess the security of your ...
      (Security-Basics)
    • [UNIX] Cisco Security Agent for Linux Port Scan DoS
      ... Get your security news from a reliable source. ... Cisco Security Agent for Linux Port Scan DoS ... Cisco Security Agent (CSA) for Linux contains a denial of service ... There are workarounds for this vulnerability. ...
      (Securiteam)