Front

CSA Battle Card

Whenever you hear«

Viruses and We would like to I love the idea of

worms cause implement Quality IPS blocking
repeated outages, of Service routing attacks in the
and emergency for apps like network, but think
patching adds Softphone, but we that we need more
more disruption don¶t trust the accurate
and expense. endpoints not to signatures.
abuse QoS.

«think CSA


  


 
 



 



    Cisco Confidential c
 CSA Protect Detect Respond
(Back of the Card)   
What It Does Value Proposition Key Points
! CSA protects desktops and servers against Zero-Day virii, worms, ! Reduces ³emergency patching´, reducing patch-
spyware, etc. without requiring any updates related downtime and man-hour expense
! Easy way to provide QoS services for mission-
!³Trusted QoS´ uses CSA to identify mission-critical or VoIP data critical or voice apps, while preventing ³cheating´
flows, and NAC tells the routers it can trust the QoS marking by undesired apps (Bittorrent)
because CSA is preventing unauthorized apps from ³cheating´
!Increases signature fidelity of IPS signatures,
!CSA sends endpoint information to IPS 6.0, increasing the signature allowing more attack blocking in the network
³fidelity´ and making the signature ³Risk Rating´ more effective without false positives

Success Story Proof Points CXO Objection Your Response

! CSA stopped the Zotob worm at Westinghouse Electric: ! ³Are you saying I ! You patch on your own
"In May, we saw a day-zero virus that was morphing twice a don¶t have to patch my schedule, and not in ³fire
systems?´ drill´ mode.
day. We were right on the forefront of the attack. We could
see these things hitting, but they weren't bringing us down, !CSA eliminates the need
because Cisco Security Agent was stopping them.³ !³I can turn QoS on to understand the
" 
#  
# 
$
$  
   

 
today in routers and applications and ports
%  
& 
   switches.´ used, reducing
deployment and ops costs.
!CSA Protects Siemens Energy and Automation: "There is !Most mission-critical apps
a lag time between when we get an update from [the anti- !Softphone already
don¶t, and some others
marks data packets
virus vendor] and when we can push it out. We have (Bittorrent) might. CSA
with QoS
between eight and nine hundred employees who work ensures QoS is used when
mostly remotely and don't connect to our network very needed, and no other time
often. Keeping those people updated was a huge What is the closest link to CSA?
challenge."
NAC/CCA
" '
 
$  
 
$$ 

  
&( CSA protects the endpoint and NAC/CCA protects the
network.


  


 
 



 



    Cisco Confidential