Re: Cisco Adaptive Security Appliance goes beyond blocking ports. Is that a Microsoft-only defense?

I believe ASA is extremely limited right now and also requires a firmware update to improve its detection. I seem to recall it has about 30 application layer checks versus Juniper's 100 application layer checks and versus Check Point's 1,700 application layer checks. I'm more familar with CP and it definitely knows about different exploits for many vendors products.

Ray

> What I would like to clarify, because is a matter of dispute among
> some colleagues, is exactly what applications and operating systems
> are being inspected. My buddies claim (more like a wild or hopeful
> guess) that not only is port 1521 of an Oracle server blocked but the
> ASA knows about Oracle exploits, and similarly it can check for
> weaknesses on behalf of Linux or other Unixes. I find that very hard
> to believe, and my counterclaim is that only Windows or other
> Microsoft products have reached a level of disseminated infections to
> grant the depth of attention by the security software.
>
> Comments?
>
> -Ramon F Herrera
>
Received on Fri Mar 02 2007 - 19:19:32 CST