The part of CSA you are looking for i believe is the Network Applications interceptor:
quote:
Originally posted by http://www.ciscopress.com/articles/article.asp?p=404167&rl=1
Network Applications interceptor—Limit or allow individual applications to access the network via specific protocols and networks addressing parameters.
More info and howtos about Cisco Security Agent Management Center:
Using Management Center for Cisco Security Agents 5.0 - Using Application Classes
Another interesting thing that might solve it is Local Learn Mode ..found on
Cisco Security Agent Overview / Figure A-7 Agent Local Firewall Settings Screen
Good luck! This is as far as i can help you since i don't use the program myself.
/ 
