Critical System Protection

Is there a CSP agent available yet for Sun Solaris V11.

Yes.  It first shipped in 5.2.8 MP3.  

Thanks for the reply. You are stating that  5.2.8 MP3 will run on Solaris V11, but do you know if it is officially supported to run on V11?

Rob

From the Platform Feature Matrix PDF that ships with the product:

Solaris 11 -- No zones

Processors Supported:  SPARC, x86, AMD64, EM64T

IDS:  Yes

C2 Collector:  No

IDS Baseline Policy:  Yes

FIM Package 1:  Yes

RT-FIM:  No

IPS Support:  No

Process Access Control:  No

Memory Controls:  No

Custom IPS Policies:  No

IPS Option Consistency:  No

IPS Translator Package 1:  No

Root Accountability Logging:  No

Custom Program Children:  No

So, yes, Solaris Version 11 is supported, but only IDS is available.  We do not have IPS for Solaris 11 yet.

Thank you very much

My pleasure :-)

We currently run local and Global zones on Solaris 10 and there is a plan to upgrade to Solaris 11.

The Matrix states that zones are not supported on V11.

Does it work with zones well enough to use in a test environement (not officially supported) or will it simply not function with Solaris 11 zones?

Also is there a plan to add Solaris zone support for V11 and if so when?

Also if there is an update to further support V11 will it include Prevention as well as Detection?

My boss is asking me to see if Mcafee has a similar product that will work on Solaris 11. I don't want to go down that road. I prefer to use Symantec CSP.......

Thanks

Rob

From what I have seen, it is not on the roadmap for Zones on Solaris 11.

Our IPS driver is not designed to be used on "Shared Kernel" architecture, which apparantly is what Solaris has gone to.

We can protect the host box and what comes in and out of the zones, but not any zone itself.