Creating Custom Policies for the Cisco Security Agent

Contents

  1. Why Write Custom Policies?
  2. Preparing for the CSA Tuning Process
  3. Best Practices for Tuning
  4. Sample Custom Policies
  5. Using Dynamic Application Classes
  6. Forensics
  7. Summary

Chapter Description

Creating your own policies is a major part of operating a successful CSA deployment. To accomplish this, you must thoroughly understand the components available to you and the methods of research available. Understanding the rule types and the events caused by those rules helps you move forward in your deployment and perform day-to-day support. A solid grasp of the fundamentals and advanced components not only makes you an effective administrator but also an efficient one. This chapter will help you get started with this.

From the Book

Advanced Host Intrusion Prevention with CSA

Advanced Host Intrusion Prevention with CSA

$52.00 (Save 20%)

Summary

Creating your own policies is a major part of operating a successful CSA deployment. To accomplish this, you must thoroughly understand the components available to you and the methods of research available. Understanding the rule types and the events caused by those rules helps you move forward in your deployment and perform day-to-day support. A solid grasp of the fundamentals and advanced components not only makes you an effective administrator but also an efficient one.