Cisco Cisco Unified Customer Voice Portal 11.5(1) Guia Da Instalação
2
Cisco Security Agent Installation/Deployment Guide for Cisco Unified Customer Voice Portal, Release 4.1(1) November 2007
Introduction
The standalone Cisco Security Agent (CSA) provides:
•
Intrusion detection and prevention for Unified CVP software
•
Defense against previously unknown attacks because it does not require signatures (as antivirus
software does)
software does)
•
Reduced downtime, widespread attack propagation and clean-up costs
The Agent is provided free of charge by Cisco Systems for use with Unified CVP software. The Agent
provides Windows platform security (host intrusion detection and prevention) that is based on a tested
set of security rules (policy). The Agent controls system operations by using a policy that allows or
denies specific system actions before system resources are accessed. A policy controls access to system
resources based on:
provides Windows platform security (host intrusion detection and prevention) that is based on a tested
set of security rules (policy). The Agent controls system operations by using a policy that allows or
denies specific system actions before system resources are accessed. A policy controls access to system
resources based on:
•
Resources being accessed.
•
Operation being invoked.
•
Process invoking the action.
This occurs transparently and does not hinder overall system performance.
Caution
You should not view Cisco Security Agent for Unified CVP as providing complete security for Unified
CVP servers. Rather, view Cisco Security Agent as an additional line of defense that, when used
correctly with other standard defenses such as virus-scanning software and firewalls, provides enhanced
security. Cisco Security Agent for Unified CVP provides enhanced defense for many different Unified
CVP installations and configurations, and thus cannot act as a host-based firewall.
CVP servers. Rather, view Cisco Security Agent as an additional line of defense that, when used
correctly with other standard defenses such as virus-scanning software and firewalls, provides enhanced
security. Cisco Security Agent for Unified CVP provides enhanced defense for many different Unified
CVP installations and configurations, and thus cannot act as a host-based firewall.
Other security considerations include keeping the OS updated.
The best starting point for references to security and voice products is
. A specific document to examine is IP Telephony Security
Operations Guide to Best Practices at
The policy for the CSA standalone Agent for Unified CVP is created from the default policy modules
that are shipped with Cisco Security Agent 5.2. These default policy modules secure/harden the
Windows operating system and Apache. These default policy modules are altered in order to allow
Unified CVP, including qualified third-party applications, to run smoothly.
that are shipped with Cisco Security Agent 5.2. These default policy modules secure/harden the
Windows operating system and Apache. These default policy modules are altered in order to allow
Unified CVP, including qualified third-party applications, to run smoothly.
Also in the interests of security, do not use network shares.
The standalone Cisco Security Agent for Unified CVP uses a static policy that cannot be changed.
However, see the section
However, see the section
, for
additional information.
Follow the installation instructions in this document to install the standalone Cisco Security Agent on
all Unified CVP software servers, including Call Server, Operations Console, and VXML Server.
all Unified CVP software servers, including Call Server, Operations Console, and VXML Server.
For servers running Cisco Unified ICME, see Cisco Security Agent Installation/Deployment Guide for
Cisco ICM/IPCC Enterprise & Hosted Editions.
Cisco ICM/IPCC Enterprise & Hosted Editions.
For servers running Cisco Unified Communications Manager (Unified CM), see Installing Cisco
Security Agent for Unified Communications Manager.
Security Agent for Unified Communications Manager.
For servers running Cisco Unified IP IVR, see Installing Cisco Security Agent for Cisco Customer
Response Solutions.
Response Solutions.