"Cisco Security Agent" presents a detailed explanation of "Cisco Security Agent", illustrating the use of host Intrusion Prevention Systems (IPS) in modern self-defending network protection schemes At the endpoint, the deployment of a host IPS provides protection against both worms and viruses Rather than focusing ожэчо exclusively on reconnaissance phases of network attacks a host IPS approaches the problem from the other direction, preventing malicious activity on the host by focusing on behavior By changing the focus to behavior, damaging activity can be detected and blocked-regardless of the attack "Cisco Security Agent" is an innovative product in that it secures the portion of corporate networks that are in the greatest need of protection-the end systems It also has the ability to prevent a day-zero attack, which is a worm that spreads from system to system, taking advantage of vulnerabilities in networks where either the latest patches have not been installed or for which patches are not yet available "Cisco Security Agent" utilizes a unique architecture that correlates behavior occurring on the end systems by monitoring clues such as file and memory access, process behavior, COM object access, and access to shared libraries as well as other important indicators "Cisco Security Agent" is the first book to explore the features and benefits of this powerful host IPS product Divided into seven parts, the book provides a detailed overview of "Cisco Security Agent" features and deployment scenarios Part I covers the importance of endpoint security Part II examines the basic components of the "Cisco Security Agent" architecture Part III addresses agent installation and local use Part IV discusses the "Cisco Security Agent" management console's reporting and monitoring capabilities Part V covers advanced "Cisco Security Agent" analysis features Part VI covers "Cisco Security Agent" policy, implementation, and management Part VII presents additional installation and management information Whether you are evaluating host IPS in general or looking for a detailed deployment guide for "Cisco Security Agent", this book will help you lock down your endpoint systems and prevent future attacks Secure your endpoint systems with host IPS Build and manipulate policies for the systems you wish to protect Learn how to use groups and hosts in the "Cisco Security Agent" architecture and how the components are related Install local agent components on various operating systems Explore the event database on the management system to view and filter information Examine "Cisco Security Agent" reporting mechanisms for monitoring system activity Apply Application Deployment Investigation to report on installed applications, hotfixes, and service packs Collect detailed information on processes and see how they use and are used by system resources Create and tune policies to control your environment without impacting usability Learn how to maintain the "Cisco Security Agent" architecture, including administrative access roles and backups Формат: 18,5 см х 23 см Автор Chad Sullivan.  КондиционерИздательство: Cisco Press, 2005 г Мягкая обложка, 456 стр ISBN 1-58705-205-9 Язык: Английский.