Advanced Host Intrusion Prevention with CSA

A review of the new Cisco book, Advanced Host Intrusion Prevention with CSA, by Chad Sullivan, Jeff Asher, and Paul Mauvais is posted at http://www.unixreview.com/documents/s=10092/ur0607c/. A very small book that builds upon an earlier title, this is as concise and succinct a reference to Cisco Security Agent (CSA) as you’ll find. Currently, CSA is supported on the Microsoft platforms as well as Solaris and Red Hat. CSA is the product Cisco offers for an “endpoint protection” IPS (Intrusion Prevention System); it is not difficult to implement this software but can be arduous to master it. This book takes the approach of walking you through the implementation and all the way up to, and through, troubleshooting.