Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Recommendation Needed on Host Based Intrusion Detection

Hi,

I don't have any experience in selecting or implementing a host based intrusion detection package.

I need a package to sit on a web server (Win 2k / 2003 with IIS), running some e-Commerce websites, and I need to make sure that this package can detect and/or block any attempt to manipulate the scripts or web pages. If it's possible, I want to make sure that only certain IP addresses are allowed to carry out changes for this web service.

Can Cisco Security Agent fullfil my requirements? What is the licensing scheme if I wanted to deploy this on multiple servers? And do I have to get any central management station for these servers (any CiscoWorks platform for instance) or I can manage them individually?

Any comment or recommendation would be highly appreciated.

Thanks alot.

Salem.

1 REPLY
Blue

Re: Recommendation Needed on Host Based Intrusion Detection

CSA will work well for this. You would need a license for each server. It is managed with CiscoWorks VMS.

http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html

Tom S

226
Views
3
Helpful
1
Replies