Does CSA MC need signature updates?

Unanswered Question
Mar 26th, 2007
User Badges:
  • Bronze, 100 points or more

Hey Guys,


Just like with Cisco IPS/IDS, do you need to update the CSA MC with the latest definition/signature...etc?


Thanks,

Osama

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (2 ratings)
Loading.
pmccubbin Mon, 03/26/2007 - 13:10
User Badges:
  • Silver, 250 points or more

Hi Osama,


The answer is no. CSA protects against anomalous behavior and not particular viruses or malware.


Cisco will on occasion produce Hotfixes for the agents but those have more to do with how the device functions and less with signatures written to combat a particular exploit.


In sum, the thing to remember is that the means and methods hackers use to attack PCs and servers may change but what they want to do has not (steal credit cards numbers, IDs, and Intellectual Property). CSA, when properly configured, will deny the things hackers want to accomplish even as the hackers develop new methods of compromising machines. The end result delivered by CSA is the same.


Hope this helps.


Hope this helps.

Actions

This Discussion