CSA, CCA, NAC, CTA and their Role in Security

mnlatif — Fri, 21 Feb 2020 08:02:02 GMT

Hi,

I am trying to understand the role played by the above components in a secure network as defined by Cisco. As per my understanding

CSA-->Provides Host-based IPS\IDS capabilities.

CTA\NAC-->Both work together to determine, if a Client is running the necassary SW, follows a certain policy ect. Then the Client is denied\allowed Access

CCA -> If a Client is determined to be infected\non-compliant then CCA can take actions to fix that without User-Intervention.

Am I corret for the above statements ?

Are there any similarities between CCA and CTA\NAC solution ? Is there an overlap between these two solutions ? OR Are these designed to work together to deliver more features ?

Thanks \\ Naman

Re: CSA, CCA, NAC, CTA and their Role in Security

pcomeaux — Fri, 25 Mar 2005 19:01:16 GMT

Hi Naman -

You are right-on with you descriptions. I am adding some more description to see if this can help you further.

CSA

- HIPS to reduce risk worms, viruses, spyware

- Security Policy enforcement to implement Organizations' Security Policy

NAC

- Industry Collaborative Effort (Trend Micro, McAfee, Symantec, CA, IBM and many others to come)

- enables Trust determination of end-points connecting to network devices to ensure minimimum technical requirements are met

- Phase 1 - check for Service Packs, Hotfixes, AV and/or CSA

- support IOS Routers / VPN concentrator today

- can be at any L3 hop within network

- additional device support in future (FW, AP, Switches)

- users are limited by their Trust level to resources

- users may receive a web page redirect to help fix their compliance issues

Cisco Clean Access

- Cisco-only implementation of NAC

- Trust determination done before user can communicate to any device on subnet or network

- CCA permits checking for HF/SP, PFW, AV, Spyware Cleaners, HIPs, custom application presence, etc

- users can be forced to comply with above policies before accessing network and are informed by Web Page redirects

- works with any existing network implementation, regardless of equipment manfacturor

CCA and NAC are similar in they are 2 different ways to determine Trust before users can access the network. NAC and CCA can be deployed seperately or together, depending on the customers network and requirements.

It makes sense that we may see NAC using CCA as a policy server to add additional flexability to the Trust determination of the end points. This has not happened yet nor do I know if it is planned yet since the acquisistion of Perfigo is still pretty recent.

thanks

peter

topic Re: CSA, CCA, NAC, CTA and their Role in Security in Network Security

CSA, CCA, NAC, CTA and their Role in Security

Re: CSA, CCA, NAC, CTA and their Role in Security