There's no signatures in CSA, only behavioral rules.
But you can add custom rules to CSA to accomplish almost any type of system control that you would like.
As an example, I recommend to customers to add a rule that blocks all outbound SMTP from hosts on their network. An exception to this may be a rule may be required for SMTP to their internal mail server.
The benefit to this rule is all new worms/viruses that try to spread themselves via SMTP will NOT be able to. Of course, the behaviors of the Worms and Viruses are usually caught and stopped by CSA prior to this rule being enforced. It's just an extra safeguard.
Hope this helps,
peter
