Chapter 10. Deploying Host Intrusion Prevention


This chapter addresses the following topics regarding host intrusion prevention software:

  • The Importance of Host Intrusion Prevention Software This section describes the layers of defense that we have already deployed and underscores the importance of installing host intrusion prevention software to ensure that your network is fully secured. The model used for this book is the Cisco host intrusion prevention software called the Cisco Security Agent.

  • CSA Internals This section will help you understand how CSA works, what components in your host or server are affected, and how CSA goes about recognizing and stopping a computer attack.

  • CSA Deployment This portion provides you with a high-level step-by-step process that explains how to roll out CSA into your business or enterprise.

  • Antivirus Deployment This section helps you to understand what antivirus software will and will not do for you. The importance of using antivirus software in conjunction with CSA is also discussed. It is important to use both technologies for a complete solution.

This chapter provides you with information regarding a new security technology called host intrusion prevention software. The Cisco implementation of intrusion prevention software is called Cisco Security Agent (CSA).

CSA is security software that runs on servers or desktops and recognizes behavior indicative of a present attack on these devices. When CSA sees this behavior, it either stops the behavior or stops the process or application that is performing the malicious activity.



Securing Your Business with Cisco ASA and PIX Firewalls
Securing Your Business with Cisco ASA and PIX Firewalls
ISBN: 1587052148
EAN: 2147483647
Year: 2006
Pages: 120
Authors: Greg Abelar

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net