CSA, NAC, CCA, CTA and their role in security

Hello

I am trying to understand the role played by the components above in a secure network, as defined by Cisco. According to my understanding

CSA--> features based on the host provides IPS\IDS.

CTA\NAC--> the two work together to determine, if a Client runs the SW necessary, follows a certain policy ect. The customer is denied\allowed access

CCA-> if a Client is considered as conforming to infected\non then CCA can take measures to correct this without user Intervention.

I'm corret for the above statements?

Are there similarities between the CCA and CTA\NAC solution? Is there an overlap between these two solutions? OR are those designed to work together in order to offer more features?

Thank you------Naman

Hi Naman-

You are phenomenal with you descriptions. I add a description more to see if this can help you more.

CSA

-HIPS to reduce the risk of worms, viruses, spyware

-Application of security policies for put implement the organizations security policy

NAC

-Collaborative effort industry (Trend Micro, McAfee, Symantec, CA, IBM and many more to come)

-allows trust determination of parameters of connection to network devices to ensure the seat technical requirements are met

-Phase 1 - search for Service Packs, patches, AV or CSA

-support IOS routers / VPN concentrator today

-can be at any jump of L3 in the network

-support for additional devices in the future (FW, AP, switches)

-users are limited by their level of trust resources

-users can receive a web page redirect to help solve their problems of compliance

Cisco Clean Access

-Only implementation of the NAC Cisco

-Determination made before the user can communicate with any device on the subnet or network of trust

-Allowed CCA seeking HF/SP, PFW, AV, Spyware, hips cleaners, presence of custom application, etc.

-users can be forced to comply more policies prior to accessing the network and are informed by Web Page redirects

-works with any existing network implementation, regardless of the equipment manfacturor

CCA and NAC are similar they are has 2 different ways to determine the trust before that users can access the network. NAC and CCA can be deployed separately or together, depending on the network of customers and requirements.

It is logical that we see NAC using CCA as a NPS server to add extra flexability to determine the end Trust points. It has not yet arrived, and I don't know if it's still expected as the acquisition of Perfigo is still fairly recent.

Thank you

Peter

Tags: Cisco Security

Similar Questions

  • How can I associate social media and their icons in my signature?

    Can you help me please? I can't find out how to add social media and their images in my email signature. I do not know the code, so if that's what I have to do, send me a process step by step on how to do it. It would be much easier if I could have called for help instead of having to go through a complicated website and system just posted a question which may take long to get a response.

    You dial you signature in an HTML document. You can do it in Thunderbird, just as you could write an e-mail message.

    You can insert images inside, and you can attach to these images (via their property editors), links to social media sites.

    Finally, you save your signature as an HTML file, and then set to use as your signature.

    https://support.Mozilla.org/en-us/KB/signatures
    http://en.flossmanuals.NET/Thunderbird/ch018_composing-messages/
    http://KB.mozillazine.org/Signatures_%28Thunderbird%29

  • How can I recover the modules and their data from a failed HARD drive (the lost BONE areas, but data files are readable)?

    The HARD drive that was my OS (Windows XP Pro SP3) failed and lost quite a few areas which are essential for the operating system running. Other data is still readable. A got another HARD drive and installed Windows XP SP2, Firefox and other programs. I was able to retrieve the bookmarks, security certificates, and other profile information using the information found in bandages.

    None of them addressed how do to recover the modules or their data. Specifically, there are several large, elegant scripts that took months to develop and customize.

    Articles related to migration and other do not work for me because they require the old copy of FF is functional, that is not because the OS on this HARD drive is damaged. Is it possible to recover these data, similar (or not) about how I could get the other profile info?

    Have you copied the entire folder C:\Documents and Settings\username \Application Data\Mozilla\Firefox\ on the old drive?
    If this is not the case, can you?
    If so, make a copy and save this folder just in case.

    If so, you could replace this folder on the new facility by \Profiles\ [with your profiles inside] folder and the profiles.ini file [delete all other files / folders that may also be in the folder "Firefox"] -and then replace with the same folder named from the old failed drive. Note that you will lose what you already have with the new installation / profile!
    Your profile folder contains all your personal data and customizations, including looking for plugins, themes, extensions and their data / customizations - but no plugins.
    But if the user logon name is different on the new facility that the former, any extension that uses an absolute path to the file in its prefs will be problems. Easily rectified, by changing the path to the file in the file prefs, js - keep the brake line formatting intact. The extensions created after the era of Firefox 2.0 or 3.0, due to changes in the 'rules' for creating extensions usually are not a problem, but some real old extensions that need only "minor" since that time can still use absolute paths - even though I have not seen myself since Firefox Firefox 3.6 or 4.0.

    View instead of 'Modules' I mentioned the 4 types of 'Modules' separately - Plugins are seen as 'Add-ons', but they are not installed in the profile [except those mislabelled as a "plugin", when they are installed via an XPI file], but rather in the operating system where Firefox 'find' through the registry.

    Note: Migration articles can tell you do not re - use the prefs.js file, due to an issue that I feel is easily fixed with a little inspection and editing. I think you can manage that my perception is that you have a small shovel in your tool box, if you encounter a problem you are able to do a little digging and fixing problems with the paths to files - once you have been warned.

    Overall, if you go Firefox 35 35 or even Firefox 34 to 35, I don't think you will run in all the problems that you can not handle [that I cross my fingers and "hope" that I'm not on what it is obvious].

    With regard to the recovery of the 'data' for individual extensions - there are many ways that extension developers used to store their data and pref. The original way should save in prefs.js or their own file RDF in the profile folder. While Firefox has been developed more, developers started using their own files in the profile folder. And because Mozilla has started using sqlite database files in Firefox 3.0, Mozilla extended their own use of sqlite, as have extension developers.
    Elegant uses the file stylish.sqlite to store 'styles', but something in the back of my mine tells me that 'the index' maybe not in this file with the data. But then again, I can be confusing myself a question I had with GreaseMonkey awhile back where I copied the gm_scripts folder in a new profile and with already installed GreaseMonkey but with no script. These GM scripts worked, but I could not see them or modify them - they do not appear in the user GM extension interface window in Firefox.

  • Records and their possible content to automatically sort in alphabetical order?

    Records and their possible content to automatically sort in alphabetical order? I'm tired of having to resort each folder and it's content when I add something new.

    The add-on SortPlaces may interest you.

  • Malware via FaceBook and their suggestion to install Maverick while I'm running on El Capitan... Apple recommends?

    FaceBook gives an alarm signal:... detected Malware via FaceBook on my computer... and their suggestion to install Maverick while I'm running on El Capitan... Apple recommends? ... and of course, this happens in the weekend... Please some advice...

    Aalthough I've not heard of before, it looks like a scam. Nothing on the Internet can scan your Mac Malware or something.

    I would also say that you don't take any advice someone on Facebook.

  • How I have no space on my ipad by storing photos on icloud (and their elimination of the ipad)

    My storage is full on my ipad, I bought an extra storage in icloud.

    I want to "liberate" space on my ipad to store the photos on my icloud and their elimination from the ipad.  Currently I can only store them at a time, which seems to go to the purchase of storage additional icloud.

    any help gratefully received.

    Hi victoriafromswansea,

    Thank you for using communities Support from Apple! If you are currently using iCloud photo library and looking to save space on your iPad, you can find the option optimize the described in the following article useful:

    Can I use iCloud photo library to save space on my device?

    iCloud photo library automatically keeps all of your photos and videos in the original version, in high resolution. Follow these steps to choose how you store your photos and videos on your device:

    • On your iPhone, iPad or iPod touch, tap Settings > iCloud > pictures or settings > Photos & camera, then select a storage parameter.
    • On your Mac, click on Photos > Preferences > iCloud, and select a storage parameter.

    If you turn on [device] Optimize storage, iCloud photo library manages automatically the size of your library on your device, you can make the most of your device storage and access photos more than ever. All of your original photos, full resolution and the videos are stored in iCloud while unit size versions are stored on your device. You can download original photos and videos over Wi - Fi or cell phone when you need it.

    If you turn on download original, iCloud photo library will keep your original, full resolution photos and videos on iCloud and on your device. Download the originals is the default setting for iOS devices with 5 GB free storage plan and all Mac devices.

    You need an Internet connection to access a photo original or video that is stored only in iCloud.

    iCloud Photo library FAQ - Apple Support

    See you soon

  • How to get the friend list and their IDS in the integration of Facebook using Facebook SDK

    can any body send me the code
    How to get the friend list and their IDS in the integration of Facebook using Facebook SDK
    I did after connection and wall

    Welcome on the support forums.

    Please check the strawberry sample that ships with the SDK

  • What is the best way to manage fields on a screen to draw in paint () or manage through managers and their layout() method?

    Hi all,

    Sorry if this is a stupid question, but I'm kind of confused because of my friends on my code examination. I just thought that this forum is the right place have the answer

    I develop a very simple screen but I m using feeders to quidon all the placement of objects on the screen.

    I has a high HFM which has 2 tags that is exterme right and the other is on the far left of the hfm screen.this is added to the screen

    There is a value for money including two labels and two basicEditFields.

    There is an another HFM which has two button in what should be at the centre of the screen.

    This button HFM is add in the optimization of the resources that are directly added to the screen

    Now all the alignment of the manipulated by the sublayout methods of the manager.

    According to my friends, I should HAV done this VIA object not via too many Manager and their layouts...

    I want to know are right? or you can suggest a better way?

    Concerning

    In General, having too many managers slows down things. It is generally recommended to have as little as possible nesting Manager.

    That being said, your friend is too complicate things. Managers are there for a reason and you use them for good reasons (to quickly, glancing at your description, this can be done via a single Manager custom without using a lot of nesting of the optimization of the resources/HFM).

    Managers will take care of the tune-up, scrolling, etc.. Fact all through painting is stupid for this use case.

    With the help of de facto managers save time, makes it easily manageable code, reduced the number of errors and makes things simpler to support/extend in the future.

    There are cases where the surrogate object and made everything yourself is preferable, is not. For this particular case, your friend is wrong.

  • Is it possible that I can see how much space is being taken up by all my emails and their attachments?

    Original title: STORAGE PROBLEM

    Is it possible that I can see how much space is being taken up by all my emails and their attachments? If I right click on an email it tells me the size, but if I try to highlight all emails the properties button is grayed out.

    For Windows Live Mail, go to C:\Users\user\AppData\Local\Microsoft\Windows Live Mail, right-click on the folder and select Properties.

    You may need to show hidden files. Type the Folder Options in the search box above the Start button and select view advanced settings and check that the box "display files and folders" and 'Hide protected operating system files' are not checked. You may need to scroll down to see the second element. You should also make sure that the box before "Hide extensions of known file types" is not checked.

    I don't know about Chrome.

  • How can I do a full system Back Up, including installed programs and their installation data?

    Hello

    My question is how can I backup the entire system including installed programs and their installation data.

    I want to say clearly, backup of data of a personal nature such as my documents or my music (except records of program/data sets) is not the case.

    I want just the backup of the system (including drivers, registry and other files releated) and installed programs.

    I tried to back up the entire disc.

    The problem with, I met is "Windows backup failed while attempting to read from the shadow copy on one of the volumes to back up.

    In other words, I want to know the folders to back up and which is not (without getting that error again).

    With gratitude,

    Guy.

     

    Hello

    If I understand correctly you want to backup your computer completely, however you tried to run the Windows backup utility and has encountered an error, "Failed to backup Windows while trying to read from the shadow copy on one of the volumes to back up", is that correct?

    To answer your question, Yes! You can perform a backup can be done which includes your data and installed programs.

    System Windows Image backup

    What is a system image?
    Back up your programs, files and system settings
    Restore your computer from a system image backup
    Please follow the troubleshooting steps to fix the windows back up in question.
    Method 1

    Perform the steps in the article to resolve the problem.


    Windows backup or restore 0 x 80070001, 0 x 81000037 or 0 x 80070003 errors
    http://support.Microsoft.com/kb/973455
    See How to back up or transfer your data on a Windows computer
    Method 2
    Scan the computer for infections and then run back up please analysis the computer for infections by using the links below.

    Reference link:- http://www.microsoft.com/security/pc-security/default.aspx#Safety-products-and-scans

    Microsoft antivirus software: -.

    http://www.Microsoft.com/security/PC-security/malware.aspx


    Note:
    data files that are infected must be cleaned only by removing the file completely, which means there is a risk of data loss.
    Please let me know if the steps provided above resolves the problem or if you need assistance.
    I hope this helps.

  • Use of the BAT file - how do you completely remove 150 phones and their associated DNs?

    How do you remove completely 150 phones and their associated DNs? All phones are in the same pool of device. I prefer the way bat.

    The CUCM version: 8.6.2

    Type of phones: 7962 phones - associated with the same device pool.

    Other questions: is there a way to remove all phones and their associated DNs with elegance when all phones are associated with the same mass of device? I rather not work with extensions and MAC addresses.

    Thank you

    Hug Lupas

    Hello hug,

    Using the BAT, it will take 2 - passes. 1 for unassigned phones and 1 for "DN". This is well illustrated in the attached doc;

    http://www.Cisco.com/c/en/us/TD/docs/voice_ip_comm/CUCM/bat/8_0_1/bat-80...

    Of course for the DN you could remove through the road map report > unassigned DN > select all > delete

    See you soon!

    SoC

  • List edge bridges and their version - PowerCLI

    I'm looking for a way to list all the bridges of edge deployed in all my ORG CDV in my vCD 5.6.4 instance.

    Does anyone have any documentation or examples of how I can find these gateways of edge and their versions using PowerCLI?

    vCD 5.6.4 facilitate really whether the bridge aboard is obsolete.  I know that I can browse vShield Manager, but this interface is not as attractive to use when there is a few hundred edge existing gateways.  A way to find this information using PowerCLI would allow me to list, sort and inform customers.

    It makes it much easier to upgrade as well if we have bridges of edge to date.

    Did anyone done this before?

    I wanted to do the same thing, so I did this today:

    # Author: Adam Rush

    # Created on: 2016-05-28

    # Find all extensible vShield edges and exported the CSV on Office

    $reportPath = "$HOME\Desktop\upgradable-VSEs.csv".

    $report = @)

    Write-Host "Search all vShield edges" - ForegroundColor yellow

    $edges = get-View - ViewType virtualmachine-Property Name, filter-Config @{' Config.VAppConfig.Product [0].} {Name '=' vShield Edge'} | % {

    $edge = "| Select 'Name', 'Version '.

    $edge. Name = $_. Name

    $edge. Version = $_.config.vappconfig.product [0] .version

    $report += $edge

    }

    $highestVersion = ($report |) Version tri-decroissant) .version [0]

    Write-Host "version of highest vShield Edge: $highestVersion"-ForegroundColor yellow.

    Write-Host "export vShield extensible edges...» "- ForegroundColor yellow

    $upgradableVSEs = $report | Where {$_.version - lt $highestVersion}

    Write-Host "save file to: $reportPath"-ForegroundColor yellow.

    $upgradableVSEs | Export-Csv-path $reportPath - NoTypeInformation - UseCulture

  • In photoshop CS5 (bridge) I could select all the images and their size still before turning them into JPEG files. I can't find a way to do it in CC

    In photoshop CS5 (bridge) I could select all the images and their size still before turning them into JPEG files. I can't find a way to do it in CC

    Hi Tanuj.

    I actually understand it. Not the best user friendly system. Where as before (CS5), I just had to go to crop tool and choose the dimensions and the inches now it in the window. Just really complicated for nothing.

    Thanks anyway Tanuj

    Melanie

  • What happens at the same time integrate codes if a user leaves their company and their CC license is cancelled?

    I run a small (two people) web company that uses CC. We are about to add an employee, so I turn to a business account and their setting up of a seat CC. From time to time this employee will develop Web sites that use Typekit fonts.

    If/when this employee left the company and its headquarters is cancelled, what happens to the embed code/TypeKit ID? It stay active to society or just disappear (screwing up policies of the sites that use them)?

    If the codes will go away, is there a simple way to keep track of which incorporate codes are used so that they can be implemented by someone else in the company?

    Thank you.

    Hi Jason,

    Thank you for your interest in Typekit. There will be no interruption to the police which serves for your websites if creative cloud of employee subscription ends. Remove a user from your Creative team subscription has no cloud automatically remove web fonts from Typekit kits; you would need to connect to the Typekit website and chose to delete the fonts as well.

    Typekit Support will be able to help you transfer these kits to another employee who has creative cloud or, if this isn't an option for some reason, convert the account Typekit a standalone subscription. (The stand-alone Typekit plan would be charged separately creative cloud; current subscription rates are available on our Web site: https://typekit.com/plans.)

    In both cases, write to us at [email protected] for more information when (if) you need to make these changes.  You can also feel free to contact us at this email with any other questions on the use of Typekit.

    I hope this helps!  Best,

    -liz

  • PowerCLI - there cmdlets to browse the store of data for files/directories and their creation?

    Hello

    PowerCLI - there cmdlets to browse the store of data for files/directories and their creation?

    If Yes, can you please let me know.

    I took a glance at the reference of the cmdlet, but can not find...


    Kind regards

    Dreamer

    You can use the data store provider.

    It is documented in the vSphere PowerCLI Administration Guide that was installed with PowerCLI.

Maybe you are looking for

  • How can I apply for if I'm in Dominican Republic for 1 week?

    How can I apply for if I'm in the Dominican Republic for a week and I want to call landlines USA?

  • Updated by Satellite L300-1AQ and Win7 - a few questions

    Sorry will try this again as my original thread does not appear anywhere. I have a Satellite L300-1AQ and only got their hands on the disks to upgrade Toshiba Windows 7 - Vista Home Premium to Win 7 HP. Can I really use this to perform a new installa

  • TDMS Excel Add-in does not limit new line Excel 2007 support

    First stop, I want to say that format TDM/PTM is really useful. It allows you to perform all sorts of things that would be a real pain if you've tried to do with spreadsheets, delimited by tabs. You can format data in spreadsheets excel for analysis

  • Find the old bios for x 220

    I think I have problems due to download BIOS (Thinkpad BIOS Update Utiility v 1.33.1.21).  Is there a source of old BIOS so that I can restore to see if the problems go away?

  • Problem with setBorder in a buttonField custom

    Hello world I have a custombuttonfield and I FOCUS put border for NORMAL, ACTIVE, and DISABLED using: field.setBorder (ButtonField.VISUAL_STATE_NORMAL, BorderFactory.createBitmapBorder,...); The thing is that there is a scenario in which the button w