component is installed on the host system and continuously monitors local system activity and analyzes the operations of that system. Cisco Security Agents takes proactive action to block attempted malicious activity and polls the Management Center for Cisco Security Agent at configurable intervals for policy updates. Obviously, the Management Center should also run CSA.