Thank you so much Tom. Is it the Cisco Security Agent Analysis license?

Thanks again,

Nitass

Hi Nitass

Yes, that's what they call profiler now.

Tom

Thank you very much for your kind.

Have a nice day,

Nitass

Tom,

Did you ever try to use the Profiler or hear of anybody who did?

I was curious because our customers usuallly balk at the price. If it really was so good Cisco probably should have included it in order to distinguish its product from the rest of the Host-based IPS products.

Just my 2 cents.

If anyone has experience with the Profiler please post your opinion.

All responses will be rated.

Thanks!

Hi Paul, I use the Cisco Security Agent Analysis (used to be Profiler) now for application behavior investigation.

I didn't like Profiler much because it created rulesets that were very restricted (it only allowed the app being profiled and nothing else).

It works much better now because you can enable app behavior and deployment investigation for hosts or groups and go through it when needed.

I haven't dug into it fully but it seems to work better than it used to.

Tom