https://community.cisco.com/t5/network-security/csa-behaviour/m-p/1193397#M77948 <P>Hi All,</P><P></P><P>I just want to ask a general question regarding the CSA software... </P><P>Does it work by analizing the network traffic and then reporting everything not 'normal'? Or can it work based on signatures as regular IPS devices?</P><P></P><P>Thank you!</P> Sun, 10 Mar 2019 20:41:58 GMT fedecotofaja 2019-03-10T20:41:58Z https://community.cisco.com/t5/network-security/csa-behaviour/m-p/1193397#M77948 <P>Hi All,</P><P></P><P>I just want to ask a general question regarding the CSA software... </P><P>Does it work by analizing the network traffic and then reporting everything not 'normal'? Or can it work based on signatures as regular IPS devices?</P><P></P><P>Thank you!</P> Sun, 10 Mar 2019 20:41:58 GMT https://community.cisco.com/t5/network-security/csa-behaviour/m-p/1193397#M77948 fedecotofaja 2019-03-10T20:41:58Z https://community.cisco.com/t5/network-security/csa-behaviour/m-p/1193398#M77951 <HTML><HEAD></HEAD><BODY><P>CSA is rule based and monitors system behavior and network traffic.</P><P></P><P>It comes with a set of default policies that can be tuned to your environment.</P><P></P><P>You can read more here:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html" target="_blank">http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html</A>#</P><P></P><P>Tom</P><P></P></BODY></HTML> Tue, 13 Jan 2009 22:09:10 GMT https://community.cisco.com/t5/network-security/csa-behaviour/m-p/1193398#M77951 tsteger1 2009-01-13T22:09:10Z