From: Brad Ellis (brad@ccbootcamp.com)
Date: Mon Nov 12 2007 - 13:18:17 ART
Bill,
I'm not a big fan of the CSC module. After I used it for a few months, I
preferred a server based solution that had many more features than the
CSC module offered. But yes, with the acquisition of Ironport, I would
assume that the CSC would either be upgraded to support additional
features (like the ones I was looking for), or possibly completely
replaced.
thanks,
Brad Ellis
CCIE#5796 (R&S / Security)
CCSI# 30482
CEO / President
CCBOOTCAMP - A Cisco Sponsored Organization (SO)
Email: brad@ccbootcamp.com
Toll Free: 877-654-2243
Direct: +1-702-968-5100 = Outside the USA
FAX: +1-702-446-8012
YES! We take Cisco Learning Credits!
Training And Remote Racks: http://www.ccbootcamp.com
Webinar November 19th
http://www.ccbootcamp.com/webinar-registration.html
-----Original Message-----
From: Bill Wharton [mailto:bill_wharton@mailhost.cjb.net]
Sent: Monday, November 12, 2007 7:32 AM
To: Brad Ellis
Subject: RE: anti-virus - use IPS or CSC-SSM [mx]
Hey brad
You seem to know a good bit about these CSC's. I'm considering them for
a
customer and was wondering if after the Ironport acquisition, would this
be
a dead product in a year? I know it's not a great product to begin with
but
my customer needs a 1-appliance model for under 50 users
Thx
Bill
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Brad
Ellis
Sent: Saturday, February 17, 2007 11:08 PM
To: Tim; techlist01@gmail.com; security@groupstudy.com
Subject: Re: anti-virus - use IPS or CSC-SSM
Both of the devices will detect information based on their signature
set.
If the CSC has the current Melissa virus signature, then it will stop
it.
If the IPS module has a signature that matches the virus, then you can
have
it drop those packets.
For a production environment, we took a look at the CSC module and we
though
it was a bit weak. We are running the trend-micro stand alone product
now,
and it works great.
I have two of the CSC modules if you'd like to purchase one. ;)
thanks,
Brad Ellis
CCIE#5796 (R&S / Security)
CCSI#30482
Network Learning Inc - A Cisco Sponsored Organization (SO) YES! We take
Cisco Learning credits!
mailto:brad@ccbootcamp.com
http://www.ccbootcamp.com (Cisco Training and Rental Racks)
http://www.ccbootcamp.com/groupstudy.html (groupstudy member discounts!)
Voice: 702-968-5100
FAX: 702-446-8012
----- Original Message -----
From: "Tim" <ccie2be@nyc.rr.com>
To: <techlist01@gmail.com>; <security@groupstudy.com>
Sent: Saturday, February 17, 2007 7:08 PM
Subject: RE: anti-virus - use IPS or CSC-SSM
Thanks for your response.
However, I'd like to better understand how the AIP (IPS) works in
comparison
with the CSC.
For example, let's say we're dealing with the Melissa virus.
Would both the AIP and the CSC stop the virus and, if so, would they
both
stop the virus in the same way? And, how does this compare with how a
host
based anti-virus product protects against viruses?
I'm not sure but I suspect the AIP works more by detecting traffic
generated
by the virus while a host based anti-virus works by identifying virus
code
and deleting it.
Regarding the CSC, I have no idea how it really does its thing.
Can you fill in the blanks?
Thanks again, Tim
-----Original Message-----
From: IE Rat (Formerly Lab Rat #109385382) [mailto:techlist01@gmail.com]
Sent: Saturday, February 17, 2007 7:38 PM
To: 'Tim'; security@groupstudy.com
Subject: RE: anti-virus - use IPS or CSC-SSM
AIP module is IPS, so you can activate/generate signatures to prevent
virus
behavior from entering the network.
CSC module provides antivirus similar to a client/server model, with
Trend
Micro agents and such. This along with other anti-x and content
filtering
services.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Tim
Sent: Saturday, February 17, 2007 2:12 PM
To: security@groupstudy.com
Subject: anti-virus - use IPS or CSC-SSM
Hi Guys,
According to Cisco both the IPS and the CSC-SSM can detect and block
viruses.
Is this really true?
If so, what's the difference between these 2 products when it relates
specifically to viruses?
Also, how does the anti-virus functionality of these 2 network based
products compare with host based anti-virus products such as McAfee?
TIA, Tim
This archive was generated by hypermail 2.1.4 : Sat Dec 01 2007 - 06:37:29 ART