Over the past month I have been comparing and testing desktop protection agents (intrusion detection/prevention for the desktop) for our corporate environment. One of the primary purposes of deploying this technology is to prevent any zero-day exploits from taking hold in our environment (yes, it needs to overcome errors in user judgement). In order to provide this type of protection, the agent cannot be reliant upon signatures (with polymorphic virus coding, these are on the way out anyway).

During this time, the comparison has come down to two players: Cisco Security Agent (formerly Okena) and ISS RealSecure Desktop Protector. Does anyone out there have any experience (positive or negative) regarding these products. Your opinions and/or experiences would be greatly appreciated.

Thank you in advance...

~aberration~