|
Prevent security breaches by protecting endpoint systems with Cisco Security Agent (CSA), the Cisco host Intrusion Prevention System. - Learn the basics of endpoint security and why it is so important in today's security landscape
- Protect endpoint systems from hackers, viruses, and worms with host intrusion prevention security
- Prevent "Day-Zero" attacks with the first book on CSA deployment
Endpoint systems, being the point of execution for the malicious code, is where the most effective counter-intrusion mechanisms should be placed. Cisco Security Agent (CSA) is an important part of the network security puzzle that can help organizations secure their end systems. Its many capabilities include preventing "Day Zero" worm attacks, end system virus attacks, and Trojan horses; acting as a distributed firewall; performing an operating system lockdown; and performing application control. With the vast array of features, capabilities, and complexities associated with CSA, users need expert guidance to help them implement and maintain this important new security device and use it to maximum effect. This book presents a detailed explanation of CSA, illustrating the use of the product in a step-by-step fashion. Cisco Security Agent presents a complete view of host intrusion prevention with CSA, including basic concepts, installations, tuning, and monitoring and maintenance. Part I discusses the need for end point security. Part II helps readers understand CSA building blocks. Part III delves into the primary concern of new customers, that being installation. Part IV covers monitoring and reporting issues. Part V covers CSA analysis features. Part VI discusses creating policies and CSA project implementation plans. Maintenance is covered in Part VII. |
