Guest

CiscoWorks Security Information Management Solution

CiscoWorks SIMS 3.2.1 Product Bulletin

  • Viewing Options

  • PDF (58.8 KB)
  • Feedback
PRODUCT BULLETIN NO. 2152

Introduces the Upcoming Availability of CiscoWorks SIMS Solution Engine 3.1.2 Software Upgrade

Cisco Systems ® announces the availability of the CiscoWorks Security Information Management Solution (SIMS) 3.2.1. Designed for large or global enterprise or managed security service provider networks, CiscoWorks SIMS 3.2.1 collects and analyzes critical multi-vendor security events from intrusion detection and prevention systems (IDS and IPS), firewall, operating systems, and antivirus system (AVS), Cisco Secured Agent, access policy server, Cisco IOS ® routers and switches, and virtual private network devices. This security information is correlated statistically, evaluated according to default or defined security rules, and presented in real time by priority to administrators in a format that can be acted upon. CiscoWorks SIMS uses automation, intelligence, and simplification to increase productivity and reduce total cost of ownership while also increasing network security. CiscoWorks SIMS 3.2.1, a key component of Network Admission Control (NAC), Self-Defending Network (SDN) solution, adds multi-vendor security device event monitoring capabilities to customer's overall security solutions.
CiscoWorks SIMS 3.2.1 device licenses are classified into category 1, 2, 3, and 4 with category 1 as "highest-end" device and category 4 as "lowest-end" device. For more detail information on device categorization, contact your Cisco product sales specialist or representative.

SOFTWARE OR SOLUTION ENGINE OPTION

CiscoWorks SIMS 3.2.1 is software-only release, an upgrade from CiscoWorks SIMS 3.1.1 and 3.1.2 software option. CiscoWorks SIMS 3.2.1 software option supports one or more add-on software modules that are also orderable from Cisco Systems ®. These add-on modules are:

• Rules Based Correlation

• Incident Resolution Management

• Vulnerability Correlation

• Enterprise Security Portal

• Universal Agent

Please download additional white papers that describe the offerings of CiscoWorks SIMS 3.2.1 and the add-on modules. CiscoWorks SIMS 3.2.1 will not be available for existing CiscoWorks SIMS appliance upgrade.
Upcoming in summer, 2005, Cisco Systems ® will release CiscoWorks SIMS 3.1.2 appliance, a hardware-based solution engine upgrade option that also includes support NAC, providing the same features, functionality and devices support as the CiscoWorks SIMS 3.1.2 software alternative. This new appliance release will allow customer continue its security monitoring operation by upgrading to this latest appliance release from the existing CiscoWorks SIMS 3.1 or 3.1.1 appliance. Additional option of migrating from appliance to software option, protecting its appliance hardware investment, will be available in late summer, 2005. For more information on the CiscoWorks SIMS appliance upgrade and migration option, please monitor this product website periodically or contact Cisco ® product sales specialist or representative.
The hardware-based solution engine provides regional scalability for customers with remote enterprise site deployment of standalone and fully functional SIMS while the software-only solution allows both regional and global scalability deployment for large or global enterprise and service provider network.
CiscoWorks SIMS 3.2.1 features the following:

• Event monitoring of multi-vendor security environments

• Extensive reporting for operators and high-level administrators

• Risk assessment information to understand overall vulnerability of critical network assets within the enterprise

• Forensics tools to investigate attacks

• Event correlation for rapidly detecting emerging attacks that may not be apparent from a single event

• Traffic usage reports and graphs to understand changes in traffic patterns

• Regulatory compliance monitoring and reporting

CiscoWorks SIMS 3.2.1 helps focus security teams on real threats, providing them with both the information and tools needed to respond quickly, accurately, and efficiently.

AVAILABILITY

The CiscoWorks SIMS 3.2.1 software-only solution is available now to customers worldwide. Existing CiscoWorks SIMS may purchase the upgrade or obtain free upgrade using SAS contract number. New customers can purchase this product through their normal sales channels.
The CiscoWorks SIMS 3.1.2 solution (appliance) engine upgrade will be available in summer, 2005. To verify the latest ordering or upgrade information, go to http://www.cisco.com/go/sims.

ORDERING INFORMATION

Table 1 shows part numbers commonly used to order the CiscoWorks SIMS 3.2.1 (software-only) and CiscoWorks SIMS 3.1.x Solution Engine (appliance). Some components include strong encryption technologies, which are restricted for some types of U.S. export.

SERVICE CONTRACT

Cisco recommends that customers purchase a product service contract (Cisco Software Application Support [SAS]; part numbers are given in Table 1) to provide the benefits of free bug fixes and minor releases upgrades in addition to Cisco Technical Assistance Center (TAC) support. Cisco Systems ® does not offer service contracts for major release upgrades for this product.

Table 1. CiscoWorks SIMS Part Numbers

Product Part Number

Descriptions

CiscoWorks SIMS Basic Component Part Numbers For Solaris or Linux

CWSIM-3.1-SS-K9

CiscoWorks SIMS 3.2.1 starter kit for Solaris; 30 devices

CWSIM-3.1-SL-K9

CiscoWorks SIMS 3.2.1 starter kit for Linux; 30 devices

CWSIM-3.1-EN-K9

Distributed engine add-on for CiscoWorks SIMS for Solaris or Linux

CWSIM3.2-L-UP-K9

CiscoWorks SIMS 3.1.x upgrade to CiscoWorks SIMS 3.2.1 starter kit for Linux

CWSIM3.2-S-UP-K9

CiscoWorks SIMS 3.1.x upgrade to CiscoWorks SIMS 3.2.1 starter kit for Solaris

CWSIM-EUA-L-LIC=

CiscoWorks SIMS Enterprise Universal Agent for Linux

CWSIM-EUA-S-LIC=

CiscoWorks SIMS Enterprise Universal Agent for Solaris

CWSIM-ESPL-1.0-LC=

CiscoWorks SIMS Enterprise Security Portal 1.0 add-on for Solaris or Linux

CWSIM-ESPS-1.0-LC=

CiscoWorks SIMS Enterprise Security Portal 1.0 add-on for Solaris

CWSIM-IRML-1.0-LC=

CiscoWorks SIMS Incident Resolution Manager 1.0.x add-on for Linux

CWSIM-IRMS-1.0-LC=

CiscoWorks SIMS Incident Resolution Manager 1.0.x add-on for Solaris

CWSIM-RBCL-1.0-LC=

CiscoWorks SIMS Rules-Based Correlation Engine 1.0.x add-on for CiscoWorks SIMS for Linux

CWSIM-RBCS-1.0-LC=

CiscoWorks SIMS Rules-Based Correlation Engine 1.0.x add-on for CiscoWorks SIMS for Solaris

CWSIM-VCEL-1.0-LC=

CiscoWorks SIMS Vulnerability Correlation Engine 1.x add-on for CiscoWorks SIMS for Linux

CWSIM-VCES-1.0-LC=

CiscoWorks SIMS Vulnerability Correlation Engine 1.x add-on for CiscoWorks SIMS for Solaris

CiscoWorks SIMS Appliance Basic Components Part Numbers

CWSIME-1160-K9

CiscoWorks SIMS 3.1.x solution; includes hardware and software

CWSIME-3.1-REC-K9

CiscoWorks SIMS 3.1.x Appliance Recovery Software

CiscoWorks SIMS Additional Oracle Database Licensing Part Numbers for Solaris or Linux

CWSIM-3.1-DS-K9

Additional "standard" database server for CiscoWorks SIMS for Solaris

CWSIM-3.1-DL-K9

Additional standard database server for CiscoWorks SIMS for Linux

CWSIM3.1-EDBL-1-LC

CiscoWorks SIMS Enterprise Oracle Database add-on for Linux; 1 CPU license

CWSIM3.1-EDBS-1-LC

CiscoWorks SIMS Enterprise Oracle Database add-on for Solaris; 1 CPU license

CWSIM3.1-EDBL-2-LC

CiscoWorks SIMS Enterprise Oracle Database add-on for Linux; 2 CPU license

CWSIM3.1-EDBS-2-LC

CiscoWorks SIMS Enterprise Oracle Database add-on for Solaris; 2 CPU license

CWSIM3.1-EDBL-4-LC

CiscoWorks SIMS Enterprise Oracle Database add-on for Linux; 4 CPU license

CWSIM3.1-EDBS-4-LC

CiscoWorks SIMS Enterprise Oracle Database add-on for Solaris; 4 CPU license

CWSIM3.1-EDBL-8-LC

CiscoWorks SIMS Enterprise Oracle Database add-on for Linux; 8 CPU license

CWSIM3.1-EDBS-8-LC

CiscoWorks SIMS Enterprise Oracle Database add-on for Solaris; 8 CPU license

CiscoWorks SIMS Devices Licensing

CWSIM-C1-5-LC=

CiscoWorks SIMS Category 1 large network; 5-device license

CWSIM-C1-10-LC=

CiscoWorks SIMS Category 1 large network; 10-device license

CWSIM-C2-10-LC=

CiscoWorks SIMS Category 2 small or medium network; 10-device license

CWSIM-C2-50-LC=

CiscoWorks SIMS Category 2 small or medium network; 50-device license

CWSIM-C2-100-LC=

CiscoWorks SIMS Category 2 small or medium network; 100-device license

CWSIM-C3-10-LC=

CiscoWorks SIMS Category 3 Server Class;10-device license

CWSIM-C3-20-LC=

CiscoWorks SIMS Category 3 Server Class; 20-device license

CWSIM-C3-100-LC=

CiscoWorks SIMS Category 3 Server Class; 100-device license

CWSIM-C3-500-LC=

CiscoWorks SIMS Category 3 Server Class; 500-device license

CWSIM-C4-50-LC=

CiscoWorks SIMS Category 4; 50 desktops

CWSIM-C4-100-LC=

CiscoWorks SIMS Category 4; 100 desktops

CWSIM-C4-500-LC=

CiscoWorks SIMS Category 4; 500 desktops

CWSIM-C4-1K-LC=

CiscoWorks SIMS Category 4; 1,000 desktops

Cisco Security Agent Client Monitoring Part Numbers

CWSIM-CSANAC-1KLC=

CiscoWorks SIMS Cisco Security Agent or Network Admission Control (NAC) desktop; 1,000-server license

CWSIM-CSANAC2500L=

CiscoWorks SIMS Cisco Security Agent or NAC desktop; 2,500-server license

CWSIM-CSANAC-10KL=

CiscoWorks SIMS Cisco Security Agent or NAC desktop; 10,000-server license

CWSIM-CSANAC-50KL=

CiscoWorks SIMS Cisco Security Agent or NAC desktop; 50,000-server license

CWSIM-CSANAC-75KL=

CiscoWorks SIMS Cisco Security Agent or NAC desktop; 75,000-server license

CWSIM-CSANAC100KL=

CiscoWorks SIMS Cisco Security Agent or NAC desktop; 100,000-server license

Cisco Security Agent Server Monitoring Part Numbers

CWSIM-CSASV-25-LC=

CiscoWorks SIMS Cisco Security Agent; 25-server license

CWSIM-CSASV-100LC=

CiscoWorks SIMS Cisco Security Agent; 100-server license

CWSIM-CSASV-500LC=

CiscoWorks SIMS Cisco Security Agent; 500-server license

CWSIM-CSASV-2500L=

CiscoWorks SIMS Cisco Security Agent; 2,500-server license

CWSIM-CSASV-5K-LC=

CiscoWorks SIMS Cisco Security Agent; 5,000-server license

CWSIM-CSASV-10KLC=

CiscoWorks SIMS Cisco Security Agent; 10,000-server license

Cisco SMARTnet ® Support for CiscoWorks Sims Series Products

CON-SNT-CWSIME11

Cisco SMARTnet 8 x 5 x NBD for CiscoWorks SIM 3.1.x Solution Server

SP-AR1-CWSIME11

Cisco SMARTnet SP AR Hardware 8 x 5 x NBD (Is that Correct? Pls Verify this Name) for CiscoWorks SIMS 3.1.x Solution Server

CON-SAS-CWSIME3X

Cisco SAS option for CiscoWorks SIMS 3.1.x Software loaded on Cisco 1160

SAS for CiscoWorks SIMS

CON-SAS-CWSIM31SS

Cisco SAS for CiscoWorks SIMS 3.2.1 starter kit for Solaris; 30 devices

CON-SAS-CWSIM31SL

Cisco SAS for CiscoWorks SIMS 3.2.1 starter kit for Linux; 30 devices

CON-SAS-CWSIM31EN

Cisco SAS Distribution Engine add-on for CiscoWorks SIMS for Solaris or Linux

CON-SAS-CWSIM31DS

Cisco SAS additional database for CiscoWorks SIMS for Solaris

CON-SAS-CWSIM31DL

Cisco SAS additional database for CiscoWorks SIMS for Linux

CON-SAS-SIM3NLD

Cisco SAS for CiscoWorks SIMS 3.2

CON-SAS-SIM3NSD

Cisco SAS for CiscoWorks SIMS 3.2

CON-SAS-SIMSPL1

Cisco SAS for CiscoWorks SIMS Enterprise Portal 1.0 for Linux

CON-SAS-SIMSPS1

Cisco SAS for CiscoWorks SIMS Enterprise Portal 1.0 for Solaris

CON-SAS-SIMIRL1

Cisco SAS for CiscoWorks SIMS Incident Resolution Manager 1.0.x for Linux

CON-SAS-SIMIRS1

Cisco SAS for CiscoWorks SIMS Incident Resolution Manager 1.0.x for Solaris

CON-SAS-SIMRBS1

Cisco SAS for CiscoWorks SIMS Rules-Based Correlation Engine 1.0.x for Solaris

CON-SAS-SIMRBL1

Cisco SAS for CiscoWorks SIMS Rules-Based Correlation Engine 1.0.x for Linux

CON-SAS-SIMEUAL

Cisco SAS for CiscoWorks SIMS Enterprise Universal Agent for Linux

CON-SAS-SIMEUAS

Cisco SAS for CiscoWorks SIMS Enterprise Universal Agent for Solaris

CON-SAS-SIMVCS1

Cisco SAS Vulnerability Correlation Engine 1.0.x for Solaris

CON-SAS-SIMVCL1

Cisco SAS Vulnerability Correlation Engine 1.0.x for Linux

CON-SAS-SIM3EL1

Cisco SAS for CiscoWorks SIMS; 1 CPU for Linux

CON-SAS-SIM3ES1

Cisco SAS for CiscoWorks SIMS; 1 CPU for Solaris

CON-SAS-SIM3EL2

Cisco SAS for CiscoWorks SIMS; 2 CPU for Linux

CON-SAS-SIM3ES2

Cisco SAS for CiscoWorks SIMS; 2 CPU for Solaris

CON-SAS-SIM3EL4

Cisco SAS for CiscoWorks SIMS; 4 CPU for Linux

CON-SAS-SIM3ES4

Cisco SAS for CiscoWorks SIMS; 4 CPU for Solaris

CON-SAS-SIM3EL8

Cisco SAS for CiscoWorks SIMS; 8 CPU for Linux

CON-SAS-SIM3ES8

Cisco SAS for CiscoWorks SIMS; 8 CPU for Solaris

CiscoWorks SIMS SAS

CON-SAS-SIMC100D

Cisco SAS for CiscoWorks SIMS Cisco Security Agent and NAC; 100,000 desktops

CON-SAS-SIMC100S

Cisco SAS for CiscoWorks SIMS Cisco Security Agent; 100 servers

CON-SAS-SIMC10KD

Cisco SAS for CiscoWorks SIMS Cisco Security Agent and NAC; 10,000 desktops

CON-SAS-SIMC10KS

Cisco SAS for CiscoWorks SIMS Cisco Security Agent; 10,000 servers

CON-SAS-SIMC110

Cisco SAS for CiscoWorks SIMS Category 1; 10 devices

CON-SAS-SIMC15

Cisco SAS for CiscoWorks SIMS Category 1; 5 devices

CON-SAS-SIMC1KD

Cisco SAS for CiscoWorks SIMS Cisco Security Agent and NAC; 1,000 desktops

CON-SAS-SIMC250

Cisco SAS for CiscoWorks SIMS Category 2; 50 devices

CON-SAS-SIMC25D

Cisco SAS for CiscoWorks SIMS Cisco Security Agent and NAC; 2,500 desktops

CON-SAS-SIMC25S

Cisco SAS for CiscoWorks SIMS Cisco Security Agent; 25 servers

CON-SAS-SIMC3500

Cisco SAS for CiscoWorks SIMS Category 3; 500 devices

CON-SAS-SIMC4100

Cisco SAS for CiscoWorks SIMS Category 4; 100 devices

CON-SAS-SIMC41K

Cisco SAS for CiscoWorks SIMS Category 4; 1,000 devices

CON-SAS-SIMC450

Cisco SAS for CiscoWorks SIMS Category 4; 50 devices

CON-SAS-SIMC4500

Cisco SAS for CiscoWorks SIMS Category 4; 500 devices

CON-SAS-SIMC50KD

Cisco SAS for CiscoWorks SIMS Cisco Security Agent and NAC; 50,000 desktops

CON-SAS-SIMC5KS

Cisco SAS for CiscoWorks SIMS Cisco Security Agent; 5,000 servers

CON-SAS-SIMC75KD

Cisco SAS for CiscoWorks SIMS Cisco Security Agent and NAC; 75,000 desktops

CON-SAS-SIMC2500S

Cisco SAS for CiscoWorks SIMS Cisco Security Agent; 2500 servers

CON-SAS-SIMC500S

Cisco SAS for CiscoWorks SIMS Cisco Security Agent; 500 servers

CON-SAS-SIMC210

Cisco SAS for CiscoWorks SIMS Category 2; 10 devices

CON-SAS-SIMC2100

Cisco SAS for CiscoWorks SIMS Category 2; 100 devices

CON-SAS-SIMC320

Cisco SAS for CiscoWorks SIMS Category 3; 20 devices

CON-SAS-SIMC310

Cisco SAS for CiscoWorks SIMS Category 3; 10 devices

CON-SAS-SIMC3100

Cisco SAS for CiscoWorks SIMS Category 3; 100 devices

Note: Cisco recommends that customers verify the latest part numbers published on http://www.cisco.com/go/sims with that published on the Cisco Global Price List.

Text Box:  Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAwww.cisco.comTel:	408 526-4000	800 553-NETS (6387)Fax:	408 526-4100	European HeadquartersCisco Systems International BVHaarlerbergparkHaarlerbergweg 13-191101 CH AmsterdamThe Netherlandswww-europe.cisco.comTel:	31 0 20 357 1000Fax:	31 0 20 357 1100	Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAwww.cisco.comTel:	408 526-7660Fax:	408 527-0883	Asia Pacific HeadquartersCisco Systems, Inc.168 Robinson Road#28-01 Capital TowerSingapore 068912www.cisco.comTel: +65 6317 7777Fax: +65 6317 7799Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed onthe Cisco Website at www.cisco.com/go/offices.Argentina · Australia · Austria · Belgium · Brazil · Bulgaria · Canada · Chile · China PRC · Colombia · Costa Rica · Croatia · Cyprus Czech Republic · Denmark · Dubai, UAE · Finland · France · Germany · Greece · Hong Kong SAR · Hungary · India · Indonesia · Ireland · Israel Italy · Japan · Korea · Luxembourg · Malaysia · Mexico · The Netherlands · New Zealand · Norway · Peru · Philippines · Poland · Portugal Puerto Rico · Romania · Russia · Saudi Arabia · Scotland · Singapore · Slovakia · Slovenia · South Africa · Spain · Sweden · Switzerland · Taiwan Thailand · Turkey · Ukraine · United Kingdom · United States · Venezuela · Vietnam · ZimbabweCopyright  2005 Cisco Systems, Inc. All rights reserved. CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502R) 	205314.F_ETMG_LF_5.05Printed in the USA Text Box:  Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAwww.cisco.comTel:	408 526-4000	800 553-NETS (6387)Fax:	408 526-4100	European HeadquartersCisco Systems International BVHaarlerbergparkHaarlerbergweg 13-191101 CH AmsterdamThe Netherlandswww-europe.cisco.comTel:	31 0 20 357 1000Fax:	31 0 20 357 1100	Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAwww.cisco.comTel:	408 526-7660Fax:	408 527-0883	Asia Pacific HeadquartersCisco Systems, Inc.168 Robinson Road#28-01 Capital TowerSingapore 068912www.cisco.comTel: +65 6317 7777Fax: +65 6317 7799Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed onthe Cisco Website at www.cisco.com/go/offices.Argentina · Australia · Austria · Belgium · Brazil · Bulgaria · Canada · Chile · China PRC · Colombia · Costa Rica · Croatia · Cyprus Czech Republic · Denmark · Dubai, UAE · Finland · France · Germany · Greece · Hong Kong SAR · Hungary · India · Indonesia · Ireland · Israel Italy · Japan · Korea · Luxembourg · Malaysia · Mexico · The Netherlands · New Zealand · Norway · Peru · Philippines · Poland · Portugal Puerto Rico · Romania · Russia · Saudi Arabia · Scotland · Singapore · Slovakia · Slovenia · South Africa · Spain · Sweden · Switzerland · Taiwan Thailand · Turkey · Ukraine · United Kingdom · United States · Venezuela · Vietnam · ZimbabweCopyright  2005 Cisco Systems, Inc. All rights reserved. CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502R) 	205314.F_ETMG_LF_5.05Printed in the USA