Cisco Network Security Troubleshooting Handbook

Chapter 21. Troubleshooting Cisco Security Agent Management Console (CSA MC) and CSA Agent

Although the networks intrusion detection sensor (NIDS) provides network-based intrusion detection and prevention, Cisco Security Agent (CSAgent) provides threat protection for servers and desktops with a combination of multiple security features such as host intrusion prevention, distributed firewall, malicious mobile code protection, operating system integrity assurance, and audit log consolidation. Unlike traditional personal firewalls, which are based on policy, and host IDS, which is based on signatures, CSA Agent is not limited to protecting the end host from existing attacks based on a knowledgebase. Instead, with sophisticated algorithms built into ...