FAQ
Q: What are common external attacks that HIPS helps
prevent or protect against?
A: In addition to proactively
securing a machines devices and ports; CA HIPS protects machines in the
following ways: Firewall (stateful packet inspection bi-directional network
firewall). Intrusion Detection and
Prevention (packets and streams scanning and interception). OS Security, file access, registry access,
application start and spawning, COM objects (inner program interfaces), devices
access, services, Dll loading, system privileges (inject code, terminate
processes).
Q: How do I Deploy HIPS?
A: You first need to create a CA
HIPS client installation package on the CA HIPS server. You then can install HIPS on the clients by
using any of the following methods: Install the software on each computer
individually. Install the software using
a script that calls the MSI file.
Install the software using a third party software delivery tool. Note: install the software on a small number
of client computers first to test your deployment.
Q: What if I purchased eTrust Firewall?
A: The eTrust Firewall products are
being discontinued. eTrust Firewall
Enterprise and Workgroup customers with active maintenance will be given the
option of a no charge upgrade. Customers
who previously bought eTrust Firewall, either the Enterprise or Workgroup edition but do not
have an active maintenance contract, are eligible for a 50% discount.
Q: Why should I buy HIPS when a Network Intrusion
Prevention System (NIPS) appliance is cheaper?
A: A host-based intrusion prevention
is more effective at blocking and containing intrusions and infections at the
individual workstation level versus a NIPS system. NIPS do not focus on an IT environments
endpoints, where there is a high risk of threat infection. Many security experts do consider NIPS and
HIPS to be complementary of one another, giving your environment protection at
the desktop and network level.
Q: Will HIPS work with my existing anti-virus and
anti-spyware products?
A: CA HIPS is designed to complement
other vendor's anti-spyware and anti-virus products as well as CA's own
portfolio of threat products.