Cisco Security Agent (formerly Okena Stormwatch)

[zachf]

Hi,

Seems hard to find much information on Cisco Security Agent as it is a product of one of Cisco's recent acquisitions.

I am very interested in this technology and approach to Intrusion prevention.

All of the reviews I can find seem to agree it is easy to use and setup, wherease I thought an IPS based system would be a management nightmare due to changing program executables and variables on each server the agents are installed on.

Is anyone out there actually using Cisco Security Agent?

Or any other IPS?

Any issues or advice?

Has cisco developed a monitoring solution that can take events and logs from PIX, IDS, IPS, routers etc. yet? And if not why not? hehe.

thanks in advance

Zach

[pmays]

Zach,

There is some information on CCO in regard to the Cisco Security Agent (formerly Okena StormWatch):

http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html

You'll see more when Cisco Security Agent 4.0 is released in June. With the release of VMS2.2 you will have monitoring of the PIX, IDS, CSA. There is also Cisco Threat Response that you might be interested in looking at:

http://www.cisco.com/en/US/products/sw/secursw/ps5054/index.html

Later...

Perry