Cisco Security Agent

Chapter 2. Introducing the Cisco Security Agent

This chapter covers the following topics:

• Intrusion prevention and intrusion detection technologies

• The life cycle of an attack

• CSA capabilities

• CSA components overview

• CSA communication

• CSA's role with SAFE

A common problem security professionals face today is the inability to enforce the written security policies they have meticulously created. The Cisco Security Agent (CSA) provides the solution to that problem. CSA is a distributed security policy enforcement mechanism for today s large networks as well as a day-zero Intrusion Prevention System.

NOTE

Any virus, worm, or malicious code that can impact a system is considered to be day zero if no available patch or signature is available to protect ...