Cisco Security Agent

From Wikipedia, the free encyclopedia

Cisco Security Agent

Developer:	Okena/Cisco
Latest release:	5.1.0 / 2006
OS:	Cross-platform
Use:	Security / IPS
License:	Per-computer, through Cisco
Website:	Cisco Security Agent

Cisco Security Agent (CSA) is an endpoint intrusion prevention system made originally by Okena, which was bought by Cisco Systems in 2003. The software is rule-based and examines network activity and traffic, determining which behaviors are normal and which may indicate an attack.

CSA uses a three-tier client-server architecture. The Management Center (or Management Console) contains the program logic, a MS SQL database backend is used to store alerts and configuration information, and the Agent is installed on the desktops and/or servers to be protected. The Agent communicates with the Management Center, sending logged events to the Management Center and receiving updates in rules when they occur.