Cisco Security Agent

Understanding Application Behavior Investigation Components

For application behavior investigation to be successful, a few of the CSA mechanisms must perform various actions. The CSA MC provides the first and last steps in the process, and the remotely deployed agent performs the steps in the middle.

The CSA MC starts the application behavior analysis process when the administrator configures an analysis job on the central console. The job configuration process requires information about which application or process you want to investigate along with other necessary configuration parameters, which you learn about in the next few sections. When the job is completely configured, it can be deployed to the remote agent through the normal agent polling ...