Category: Cisco Security Agent
10/20/09
Windows 7 and CSA 6.0.1.106 (It works!)
Windows 7 doesn't get officially released until 10/22/2009 and it's certainly not on the supported operating systems list for the Cisco Security Agent at the time of this post. But did that stop me from using the RTM version of Windows 7 and loading up a… more »
10/19/09
08:22:52 am, by Fred Parks, 305 words
Categories: Cisco Security Agent, Systems Security Management, BigFix
Automating Cisco Security Agent Deployment - Part 1
One of the more difficult tasks associated with any agent based deployment is actually getting the agent software installed in the environment. With a Cisco Security Agent deployment, the Management Center (MC) can be configured and ready to go, but with… more »
06/01/09
CSA 6.0 Stack Recovery (Stack Unwinding)
As a follow up to my previous blog entry on Dynamic Signature Generation is the concept of CSA 6.0 Stack Unwinding. Stack Unwinding is the ability of CSA to recover applications and OS processes in order to prevent instability. An exploit doesn't neces… more »
05/29/09
CSA 6.0 Dynamic Signatures Explained
One of the least understood features of CSA 6.0 is Dynamic Signatures. In a nutshell, the dynamic signature feature matches patterns of known attacks using the RPC and LPC protocols. But the real power in CSA 6.0 Dynamic Signatures lies in the ability… more »
03/31/09
Excellent Conficker Analysis (All Currently Known Variants)
As everyone is well aware, conficker worm variants have been exploiting MS-08-067 since November 2008 (possibly earlier). Conficker continues to spread depite the fact that a patch has been out for this vulnerability since October of 2008. The latest "… more »
XML Feeds©2010 by Priveon, Inc.