topic Re: CSA and Worms detection in Network Security https://community.cisco.com/t5/network-security/csa-and-worms-detection/m-p/388905#M96341 <HTML><HEAD></HEAD><BODY><P>CSA detects (based on the rules you have in place) suspicious behavior that a worm would produce when it was trying to execute on a machine. It queries the user (if user interaction is enabled) whether they will allow it. The Global Event correlation (if you have it enabled) will notify other machines and prevent the spread of the worm even if it successfully executes. CSA knows about the virus scanner (if you have it configured) and allows it to perform as needed but it is not dependant on it for protection.</P></BODY></HTML> Wed, 27 Apr 2005 17:37:13 GMT tsteger1 2005-04-27T17:37:13Z CSA and Worms detection https://community.cisco.com/t5/network-security/csa-and-worms-detection/m-p/388904#M96340 <P>Hi all,</P><P></P><P>could someone tell me how CSA is able to detect worm attack?</P><P></P><P>Is the agent in communication with Antivirus installed on the system?</P><P></P><P>Thanks in advance</P><P>Marco</P> Sun, 10 Mar 2019 09:25:34 GMT https://community.cisco.com/t5/network-security/csa-and-worms-detection/m-p/388904#M96340 irelandsky 2019-03-10T09:25:34Z Re: CSA and Worms detection https://community.cisco.com/t5/network-security/csa-and-worms-detection/m-p/388905#M96341 <HTML><HEAD></HEAD><BODY><P>CSA detects (based on the rules you have in place) suspicious behavior that a worm would produce when it was trying to execute on a machine. It queries the user (if user interaction is enabled) whether they will allow it. The Global Event correlation (if you have it enabled) will notify other machines and prevent the spread of the worm even if it successfully executes. CSA knows about the virus scanner (if you have it configured) and allows it to perform as needed but it is not dependant on it for protection.</P></BODY></HTML> Wed, 27 Apr 2005 17:37:13 GMT https://community.cisco.com/t5/network-security/csa-and-worms-detection/m-p/388905#M96341 tsteger1 2005-04-27T17:37:13Z