I'm assuming your talking about installing the CSA Management Console.
Installing the CSAMC on CiscoWorks is fairly straight forward. Configuring the CSA policy's is a whole nother thing. Most installations usually take a couple of months to complete even then you have to continue to tune your policys weekly.
Buy this book to help supplement the documentation:
Cisco Security Agent by Chad Sullivan. Published by Cisco Press.
It will give you some ideas about setting up a pilot program. As Patrick accurately mentioned, most installations do take a couple of months. Tuning of policies is an iterative process that consumes plenty of time of the beginning but which becomes easier as you get to know the CSA product and how it interacts with your network.
I realise that CSA can be classed as a firewall that is 'signatureless'. Would I however still requre a formal firewall that does rely on signatures, eg windows XP standard or any other 3rd party product.
What about a antivirus scan engine..would one be needed on clients
CSA doesn't work well with other software firewalls installed on the client. It's network shim does the firewall capability. You should still install an anti-virus application on the client because it will enable you to remove the malware should the PC become infected. CSA will help stop the spread of the virus and keep it local.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...