01-13-2009 12:43 PM - edited 03-10-2019 01:41 PM
Hi All,
I just want to ask a general question regarding the CSA software...
Does it work by analizing the network traffic and then reporting everything not 'normal'? Or can it work based on signatures as regular IPS devices?
Thank you!
01-13-2009 02:09 PM
CSA is rule based and monitors system behavior and network traffic.
It comes with a set of default policies that can be tuned to your environment.
You can read more here:
http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html#
Tom
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community
