topic Re: ASA Host Scan in Network Security

ASA Host Scan

tholmes — Mon, 11 Mar 2019 19:20:36 GMT

Hello,

I've recently installed an ASA5520 running 8.2.3.

The customer requires VPN Client and Clientless end point threat assessment.

I understand there is a license needed to enable end point assessment but would I also need a NAC appliance or does the ASA provide some basic end point checks.

I know that CSD does a very limited check, but it does not look for malware, Trojans, patches and anti-virus software levels etc

When I look at the Host Scan configuration on the ASDM is comes up with a box saying "Host Scan only available in Version 8.4 or later"

Cisco have ended the CSA and not replaced it, that would have been a good solution.

Any info on Host Scan or whether I need a separate NAC bundle would most appreciated

Regards Tony

Re: ASA Host Scan

Jennifer Halim — Fri, 10 Dec 2010 23:49:41 GMT

Host Scan is only going to check the end point to ensure that the correct anti virus, anti spyware and personal firewall is enabled with the correct version and update. It will not be in any way the replacement for CSA where it is a host IPS.

Unfortunately there is no direct replacement for CSA within Cisco Security portfolio.

Here is the EOL notification for CSA which has referenced to that:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5739/ps2330/end_of_life_c51-602579.html

You might want to discuss this further with your Cisco AM.

Hope that helps.

Re: ASA Host Scan

tholmes — Sun, 12 Dec 2010 16:38:01 GMT

Hi Jennifer,

Thanks for the reply, If Host Scan can do even limited end point assessment then that is very useful, considering the cost of a NAC appliance.

I'll check into the reference to 8.4 with Cisco

Cheers Tony

Re: ASA Host Scan

Jennifer Halim — Sun, 12 Dec 2010 22:34:26 GMT

Host Scan can only check the end point to ensure that the correct anti virus, anti spyware and personal firewall is enabled with the correct version and update, ensuring that the end point is protected. It will not actually scan or provide malware scanning to the end hosts.

For malware and anti spyware scanning and URL filtering, you would need to use Ironport appliance or ScanSafe cloud solution.

Re: ASA Host Scan

tholmes — Mon, 13 Dec 2010 10:33:32 GMT

Hi Jennifer,

Thanks for your response, I'll certainly look into this

Regards Tony